GoKawiilGen Threat Labs shows AI agents can be hijacked via email content, launches Agent Trust Hub
Gen Threat Labs researchers demonstrated that an AI agent could be manipulated through untrusted content embedded in an email, tricking it into executing system commands, exfiltrating data and deleting files without exploiting any software vulnerability. The lab also previously identified malware called Warden Stealer that targets configuration files and local data tied to AI assistants and coding tools, risking exposure of credentials and conversation histories. In response, Gen is building the Agent Trust Hub, a trust layer meant to monitor and secure AI agents throughout their operating lifecycle.