You're listening to the Cyberwire Network, powered by N2K.

At TALIS, they know cybersecurity can be tough and you can't protect everything,

but with TALIS, you can secure what matters most.

With TALIS's industry-leading platforms, you can protect critical applications, data, and identities, anywhere and at scale with the highest

ROI. That's why the most trusted brands and largest banks, retailers, and healthcare companies in the

world rely on Talis to protect what matters most. Applications, retailers, and healthcare companies in the world rely on Talis to protect what matters most.

Applications, data, and identity.

That's Talis.

T-H-A-L-E-S.

Learn more at Talisgroup.com slash cyber.

Thank you. Hello, everyone, and welcome to the Cyberwires Research Saturday. I'm Dave Bittner, and this is our weekly conversation with researchers and analysts tracking down the threats and vulnerabilities,

solving some of the hard problems and protecting ourselves in a rapidly evolving cyberspace.

Thanks for joining us.

So we tried to approach it in a way where we have kind of multimodal attacks.

It's not just a simple prompt injection.

Now that we have the, I guess, influence of agentic AI, right?

So we have agents that can do web searches, can look at the Google Drive,

look at your email. This kind of brings in that traditional cybersecurity factor there. What are

the security boundaries, right? That's Amanda Russo, principal AI security researcher from Stryker.

The research we're discussing today is titled The Silent Exfiltration,

Zero-Click Agenic AI hack that can leak your Google Drive with one email.

So we wanted to look into how can we cross those security boundaries through just prompts, either indirect prompts or direct prompts.

...