Prismata: new technique to confine cross-site prompt injection in web agents

Researchers have published a paper on arXiv presenting Prismata, a system designed to confine cross-site prompt injection attacks targeting AI web agents. The method isolates malicious instructions injected by third-party websites to prevent them from hijacking the agent's actions. The work addresses a growing security concern as autonomous AI agents become more widely deployed online.