Waseem Ahmed

A 472-character invisible payload steered an email summarizer into reporting only the attacker's text

Forcepoint X-Labs hid instructions in zero-pixel white HTML and watched a summarizer repeat them as fact. The measurement is new; two named practitioners say the design flaw it measures has been documented since 2023.