Research finds AI web agents have no dependable defenses against prompt injection attacks

StakeBench research from Nanyang Technological University, reported by CSO Online, found that current AI web agents have no consistent defenses against prompt injection across leading systems including GPT-5 and Gemini implementations. Not a single attack scenario was blocked consistently across tested agents, indicating a foundational control gap in agent security posture.