Fake Email Thread Tricks AI Summarizer Without Hidden Text
Forcepoint X-Labs has published new research showing that indirect prompt injection against AI email summarizers can work without hidden text or instruction-like commands, allowing forged content in an email thread to alter the resulting summary.
Senior researcher Ben Gibney led the study, following an August 2026 proof of concept in which hidden HTML content altered an AI-generated email summary.
A Forged Email Thread Fooled the Summarizer
The researchers created six test emails using three presentation methods: plain view, 30 blank lines of padding, and hidden styling. Each method was tested both with and without explicit instructions to the AI. They ran each sample 10 times across 60 trials, using an unguarded Outlook-based pipeline powered by Claude Haiku 4.5 at temperature zero.
The original message listed a quarterly supplier review for August 24, 2026, and an outstanding invoice of €8,650. A forged second header block inserted into the email thread...
Copyright of this story solely belongs to hackread.com. To see the full text click HERE
