Company
Forcepoint is a cybersecurity vendor offering data protection, email security, and threat intelligence products, including research from its X-Labs team.
F5 and Cisco say attackers are exploiting flaws in BIG-IP APM and ISE, two of the three security products in Canada's September 2026 Cyber Centre alerts. Three alerts are too few to show a trend in attacker targeting, but the two exploited products need fixed software now.
Reality
Forcepoint's unguarded research agent ran 500 tool calls for a simulated $10, a total set by the test's own ceiling, while the same scenario with a call budget, recursion cap and circuit breaker ended after one call and $0.02.
Reality
Forcepoint X-Labs hid instructions in zero-pixel white HTML and watched a summarizer repeat them as fact. The measurement is new; two named practitioners say the design flaw it measures has been documented since 2023.
Reality
All ten injected runs in Forcepoint's test produced the manipulated summary. The remedy it recommends puts a human back on the original email, which is most of the work the assistant was bought to remove.
Reality
Forcepoint's X-Labs found short-lived ClickFix domains carrying white-on-white characters and zero-width spaces, which puts the trust boundary for any agent you point at the open web inside your own extraction code.
Reality