Your AI agent has the database key. Who else does?
Agents with function calling and MCP turned the chatbot into a privileged user of your system. The five abuse patterns we find in agent pentests and…
Blog · Pentest Machine
llm
Indirect prompt injection in RAG: how a PDF becomes an attack on your assistant
The most common vector we find in AI pentests doesn't come from the user — it comes from the documents your assistant reads. Here's the mechanism,…