Tag
Blue41 disclosed an indirect prompt injection vulnerability in Bunq's AI assistant, where a small bank transfer with a malicious transaction description could turn the assistant into a spearphishing vector, highlighting a broader architectural challenge for financial AI agents.