PHISHING EMAILS ARE NOW AIMED AT USERS AND AI DEFENSES

Summary from the TLDR InfoSec newsletter

Phishing campaigns are now embedding AI prompt injection commands within emails to manipulate automated analysis tools while simultaneously targeting users with credential harvesting tactics. These hidden prompts instruct AI models to enter reasoning loops rather than flag malicious content, increasing the risk of delayed detection or false negatives in SOC workflows. This dual-track approach highlights attackers' growing awareness of AI-based defenses and their efforts to bypass both human and machine detection systems.