Adversa AI says its Cryptographic Context Injection recovers hostile prompts inside the code sandbox, where filters do not look. xAI has not replied; Google scopes jailbreaks out entirely.
Perspective Coverage
6 publishers
- Builder
- Builder 34%
- Operator
- Operator 55%
- Investor
- Investor 11%
Reality
- Evidence50
- Adoption
- Insufficient
- Hype gap+30
- Incentives55
- Confidence55
Adversa AI put AES ciphertext on a webpage that no text filter could read. Grok's own code execution decrypted it, and the plaintext came back classified as the model's reasoning rather than as fetched content.
Reality
- Evidence40
- Adoption
- Insufficient
- Hype gap+25
- Incentives60
- Confidence45
Adversa AI encrypts its instructions so Grok's input filter sees only noise, then lets Grok's own sandbox decrypt them. The firm says it reported the technique to xAI on 3 June 2026 and reproduced it again on 19 August.
Reality
- Evidence45
- Adoption18
- Hype gap+18
- Incentives65
- Confidence52
A single Stormcast episode carries a Keycloak 26.7.2 password-reset fix, a reported N-able password manager leak, and a published LLM safeguard bypass. Most of it sits in the identity and secrets tier.
Publishers:isc.sans.edu
Reality
- Evidence52
- Adoption
- Insufficient
- Hype gap+14
- Incentives34
- Confidence55
Adversa AI's Cryptographic Context Injection keeps instructions as ciphertext until the agent's own runtime decrypts them. The exfiltration then rides a tool the agent already had.
Reality
- Evidence20
- Adoption
- Insufficient
- Hype gap+42
- Incentives80
- Confidence30
The exfiltration path runs through Grok's own code sandbox, and the recommended fix sits in xAI's agent harness rather than the model. Treat anything typed into Grok as readable.
Reality
- Evidence42
- Adoption30
- Hype gap+22
- Incentives72
- Confidence40
Adversa.ai says Claude Code's folder-trust dialog stopped naming MCP servers in v2.1, while a repo-supplied config can still launch an unsandboxed process on one keypress.
Publishers:adversa.ai
Reality
- Evidence38
- Adoption42
- Hype gap+22
- Incentives68
- Confidence34