Hidden prompt injection is showing up in "Ask AI" buttons on marketing pages
August 11, 2026. From issue 1 of The Compliance Brief, one story for founders shipping AI-built and vibe coded apps.
Issue 1 of The Compliance Brief went to subscribers on August 11, 2026. One of its 5 stories bears on AI security, LLM attacks and app security flaws, and they are below in short form. The full issue, with every take in full, is on traztech.ca.
Free weekly email
Get the next issue on Tuesday
One email a week: what changed in security and compliance, and what it means for founders shipping AI-built and vibe coded apps.
Free. One email every Tuesday from Jacob Masse, and nothing else: signing up here does not add you to any other sequence. One click unsubscribes.
Source: The Hacker News
Researchers observed production websites embedding hidden prompt injection payloads inside pre-filled deep links behind "Ask AI" buttons, including on marketing and competitor comparison pages. The technique needs no malware, no stolen credentials and no zero-day, because it abuses a normal feature of major AI assistants.
Our take, in short
This one sits on your marketing site rather than in your product, which means the people shipping it do not report to your head of engineering. If you have added an AI assistant handoff to your site, someone should be reviewing what those links actually carry and where the text comes from.
Read the full take on traztech.ca
Related on VibeCoded
- How do you test for prompt injection?
- AI penetration testing for LLM apps
- Can users see my system prompt?
- Glossary of AI app security and QA terms
Also in issue 1
Outside AI security, LLM attacks and app security flaws, but in the same email:
- New York fined a money transmitter for a weak program, not a breach
- LexisNexis pulled products offline over a third-party vendor incident
- The Snowflake extortion case ends with a guilty plea in Kitchener
- Gunra ransomware is getting in through firewalls, per a joint advisory
All issues on VibeCoded Newer: issue 2
Free weekly email
Get it every Tuesday
The next issue goes out Tuesday morning. Read it in your inbox instead of finding it here a week later.
Free. One email every Tuesday from Jacob Masse, and nothing else: signing up here does not add you to any other sequence. One click unsubscribes.