New AI-Targeted Cloaking Attack Tricks AI Crawlers Into Citing Fake Info as Verified Facts
A new security flaw in agentic web browsers, such as OpenAI ChatGPT Atlas, has been identified by cybersecurity experts. It leaves underlying artificial intelligence (AI) models vulnerable to context poisoning attacks.
A malicious actor can create webpages that provide different content to browsers and ChatGPT and Perplexity-powered AI crawlers as part of the assault developed by the AI security firm SPLX. The method is known as AI-targeted cloaking.
The strategy is a variant of search engine cloaking, which is the practice of showing visitors one version of a webpage while giving search engine crawlers a separate version in an attempt to manipulate search engine rankings.
In this instance, the only distinction is that attackers employ a simple user agent check to optimize for AI...