September 25, 2026
- Unit 42 found an active indirect prompt-injection campaign against AI ad-review systems — 10 domains, one of them ranked #1 in web search results, embedding hidden payloads that impersonate a popular advertiser's compliance text to get ads approved (Unit 42). As @HoustonIntrove1 put it, if your approval path is an LLM reading the page, "that payload owns the spend decision." · AI & Agent Security