How Attackers Attack AI
The serious attack surface is no longer the chatbot. It is the agent's toolbelt: retrieval, memory, skills, CI pipelines, credentials, and every renderer or proxy trusted to move data. A field analysis of EchoLeak, malicious agent skills, coding-agent compromise, state-scale campaigns, and data poisoning, separating confirmed incidents from research demonstrations, with the containment architecture that actually holds up.
Aamir Lakhani19 min read