Tamir Ishay Sharbat

GreyNoise recently published an analysis of the first large probing and reconnaissance campaign against AI deployments observed in the wild. The activity, which was captured through honeypots and confirmed by independent researchers, marks a shift from theoretical AI attack surface discussions to measured, repeatable, internet-scale behavior.

When OpenAI launched ChatGPT Agent it was the merger of two previous offerings: Deep Research - a multi-step reasoning model capable of accomplishing complex tasks, and Operator - an agent that can browse the web. But something was a bit off. Yes, it could browse and execute operations on behalf of the user, but on a remotely hosted browser. Now comes the next phase of evolution, plugging ChatGPT directly into the user’s browser - ChatGPT Atlas.

Salesforce Einstein is Salesforce’s flagship AI assistant, integrated into the Salesforce CRM. In a previous post we took a deep dive into Einstein’s architecture, mentioning how Salesforce built Einstein so it doesn’t read tool call results but instead immediately renders them onto the screen, making indirect prompt injections almost impossible (since no LLM reasons on the tool’s response).