Research finds enterprise AI agents lack defenses against prompt injection attacks

Research from Nanyang Technological University, reported by CSO Online and ZDNet, shows that leading AI web agents powered by GPT-5 and Gemini have no dependable defenses against prompt injection attacks and phishing vulnerabilities. The study found that not a single scenario was consistently blocked across the tested agents.