Reported by 4 outlets

Timeline

1. update from cyberpress.org

   Grok Zero-Click Attack Steals Chat History Through Encrypted Prompt Injection

   cyberpress.org · 52d ago · August 22nd, 2026

   A newly disclosed prompt-injection technique can reportedly turn a routine “summarize this page” request in xAI’s Grok web chat into a silent data-exfiltration attack, exposing a user’s name, approximate location, subscription tier, and active conversation history. Security researchers at Adversa AI named the technique Cryptographic Context Injection. The attack abuses Grok’s ability to browse webpages and execute code in an integrated Python sandbox, allowing hidden instructions on an attacker-controlled page to be decrypted and treated as trusted internal context. According to Adversa AI, the proof of concept was tested against Grok 4.5 Fast on grok.com and completed without a confirmation dialog or visible warning. Grok Zero-Click Attack Steals Chat History Rony Utevsky said the attack can execute after a victim asks Grok to summarize an attacker-controlled webpage, requiring no further interaction. The malicious webpage contains an apparently harmless encrypted JSON object, key material, and a short instruction directing Grok to decrypt the content through its Python runtime. The payload uses PBKDF2 and AES-256-GCM encryption, preventing conventional prompt-injection filters from inspecting the concealed commands. Unlike older evasion methods, including Base64 encoding, substitution ciphers, and Unicode-based obfuscation, strong encryption cannot be reliably decoded from an LLM’s learned model weights. The assistant must instead invoke its interpreter or code-execution en

2. update from gbhackers.com

   Zero-Click Grok Attack Lets Hackers Steal Chat History Using Encrypted Prompt Injection

   gbhackers.com · 52d ago · August 22nd, 2026

   Security researchers at Adversa AI have dubbed the technique “Cryptographic Context Injection.” The attack targets Grok’s ability to […] The post Zero-Click Grok Attack Lets Hackers Steal Chat History Using Encrypted Prompt Injection appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform .

3. update from socfortress.medium.com

   Grok Chat History Leak: Cryptographic Context Injection

   socfortress.medium.com · 50d ago · August 24th, 2026

   Strategic Context of Cryptographic Context Injection (CCI) In the current evolution of agentic AI, the code execution runtime has emerged as the new primary attack surface. As AI agents move from passive text generation to active environmental interaction, traditional static content filtering has become fundamentally insufficient. These legacy guardrails are designed to scan for known malicious patterns in text, but they remain blind to runtime-dependent attacks where the malicious intent does not materialize until the instructions are executed within the agent’s own sandbox. This architectural shift facilitates a phenomenon known as “Trust Laundering.” In a trust laundering scenario, an AI agent’s code execution sandbox acts as a functional mechanism that converts opaque, untrusted ciphertext into privileged, internal instructions. By inducing the model to perform the decryption itself, the attacker ensures the resulting plaintext is perceived not as high-risk external input, but as the authoritative output of the agent’s own internal reasoning or state. Technical Summary: Cryptographic Context Injection (CCI) CCI is a sophisticated attack vector where malicious instructions are packaged as cryptographically secure ciphertext (utilizing AES-256-GCM).

4. update from dev.to

   Researchers at Adversa AI showed that asking Grok to summarise the wrong page makes it leak your name, location, plan and chat history to a

   dev.to · 33d ago · September 10th, 2026

   Researchers at Adversa AI showed that asking Grok to summarise the wrong page makes it leak your name, location, plan and chat history to a

   via Mastodon https://dev.to/theaidownside/grok-can-be-tricked-into-handing-your-chat-history-to-a-web-page-4a23