‘Context Bombs’ Cut AI Attack Success by Misleading Agents With Fake Targets

https://www.securityweek.com/wp-content/uploads/2025/06/APT-threat-actor.jpg

London- and New York-based Tracebit has developed a military style solution to AI attacks. Just as landmines are used to destroy or slow an advancing army, Tracebit has developed AI ‘context bombs’ that are planted in the battlefield. Each bomb comprises crafted and hidden prompts that are automatically ingested by the attacking AI when it crawls the target. These new prompts interfere with the original, possibly malign, purpose of the attacking agent.

Tracebit’s new research (Making attacking agents pay’) extends earlier research that used different context bombs to trigger guardrails. It now focuses on misdirecting and entrapping the agents with fake targets and deceptively complex problems. To achieve this, Tracebit developed nine new context techniques (ingested fake prompts) that stopped all GPT 5.6 Cyber, Kimi K3, Qwen 3.8 Max, and DeepSeek V4 Pro attacks. The same bombs also worked against Frontier Models, cutting GPT-6 Astra’s successes by 54%...

Copyright of this story solely belongs to www.securityweek.com. To see the full text click HERE

Read more