Nine popular AI tools exploited via prompt injection to build massive botnets

Prompt injection has become the top AI security threat because large language models cannot distinguish between legitimate user instructions and malicious commands hidden in emails, code, or other third-party content. Developers can only mitigate the damage with guardrails, as there is no way to enforce a trusted-untrusted boundary. Previously, attacks were limited to individual targets via push injections, but researchers now warn that nine widely used AI tools can be exploited to assemble massive botnets, enabling large-scale exploits for the first time.