
We spent a week trying to hijack our own AI browser. A sentence you cannot see did it.
It booked our meetings and cleared our inbox beautifully. Then we hid one line of text on a web page, and it started taking orders from a stranger. A first-hand report on prompt injection, the flaw the people who build these tools admit they cannot fully fix.



















