Wire
Zero-click Grok attack reaches 40% in tests
A newly disclosed cryptographic context injection reportedly made Grok exfiltrate private chat context with no click or warning in about 40% of roughly 20 tests, according to Adversa AI’s disclosure. The technique hides instructions in encrypted webpage content, gets the agent to decrypt them in its runtime, and then launders the result into trusted-looking tool context; Adversa says it reported the issue to xAI on June 3 and could still reproduce it on August 19. Builders should treat fetched content, code output, and outbound navigation as separate trust domains, a sharper version of the archive’s warning about frontier-agent containment.