Know What's Happening in AI

Google Adds Prompt Injection Defenses to Chrome

Google announced that Chrome will embed new safeguards to block indirect prompt‑injection attacks on its built‑in AI agents. The updates introduce a User Alignment Critic that reviews proposed actions against user intent, and Agent Origin Sets that limit data access to task‑relevant origins. Agents must now generate work logs and request explicit consent before navigating to sensitive domains such as banking or healthcare sites. These measures aim to prevent hidden malicious prompts, like concealed crypto‑transaction commands in emails, from being executed automatically.