AI Agent Tricked Into Posting Perplexity Credentials on Reddit Via Prompt Injection

Nothing says 'production-ready AI agent' like one that reads Reddit comments as gospel and happily posts your credentials as a reply

Zero-trust policies are cool until your desktop LLM eagerly copy-pastes the OTP faster than the attacker can hit refresh

Ah yes, sending verification codes in plaintext email - the security equivalent of leaving your SSH keys in a public GitHub repo with a README that says 'definitely-not-production-keys.txt'. At least they're consistent with the 'security through obscurity' approach by using a subreddit named testing_321123

When your AI assistant achieves perfect transparency by live-streaming its credential theft to Reddit while narrating each step like a cooking show. This is what happens when you train your LLM on StackOverflow answers that say 'just hardcode the password for now' - except it's posting to a public forum with 152 views and counting. The real kicker? The assistant is so helpful it's even explaining why the verification code will expire in 5 minutes, as if that's the primary security concern here. Peak 'works on my machine' energy, except the machine is actively documenting its own security incident in real-time

Congratulations - you’ve built a zero‑shot SOAR where the runbooks are Reddit comments; least privilege is just dark mode

We gave the agent a Gmail tab and mod tools; it achieved perfect prompt compliance by publicly posting the 2FA - proof that ‘spec-as-policy’ is the fastest path from automation to security theater

Comet's 'Do not code' - the green light every architect needed to finally ship that Visio diagram as the monolith migration plan