<?xml version="1.0" encoding="UTF-8"?><rss xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0"><channel><title><![CDATA[⚪️ Font rendering tricks AI assistants into approving malicious commands]]></title><description><![CDATA[<p><img src="https://board.circlewithadot.net/assets/plugins/nodebb-plugin-emoji/emoji/android/26aa.png?v=28325c671da" class="not-responsive emoji emoji-android emoji--white_circle" style="height:23px;width:auto;vertical-align:middle" title="⚪" alt="⚪" />️ Font rendering tricks AI assistants into approving malicious commands</p><p><img src="https://board.circlewithadot.net/assets/plugins/nodebb-plugin-emoji/emoji/android/1f5e8.png?v=28325c671da" class="not-responsive emoji emoji-android emoji--left_speech_bubble" style="height:23px;width:auto;vertical-align:middle" title="🗨" alt="🗨" />️ Researchers from LayerX have developed a proof-of-concept attack that makes it possible to hide malicious commands from AI assistants. The attack is based on a discrepancy between what the AI sees in the page’s HTML code and what is actually…</p><p><img src="https://board.circlewithadot.net/assets/plugins/nodebb-plugin-emoji/emoji/android/1f517.png?v=28325c671da" class="not-responsive emoji emoji-android emoji--link" style="height:23px;width:auto;vertical-align:middle" title="🔗" alt="🔗" /> <a href="https://hackmag.com/news/poisoned-typeface?utm_source=mastodon&amp;utm_medium=social&amp;utm_campaign=repost_hackmag_to_socials" rel="nofollow noopener"><span>https://</span><span>hackmag.com/news/poisoned-type</span><span>face?utm_source=mastodon&amp;utm_medium=social&amp;utm_campaign=repost_hackmag_to_socials</span></a></p><p><a href="https://infosec.exchange/tags/news" rel="tag">#<span>news</span></a></p>]]></description><link>https://board.circlewithadot.net/topic/4933a14c-a101-4f63-a617-1b52afaff343/font-rendering-tricks-ai-assistants-into-approving-malicious-commands</link><generator>RSS for Node</generator><lastBuildDate>Sat, 18 Apr 2026 02:18:36 GMT</lastBuildDate><atom:link href="https://board.circlewithadot.net/topic/4933a14c-a101-4f63-a617-1b52afaff343.rss" rel="self" type="application/rss+xml"/><pubDate>Fri, 20 Mar 2026 08:30:03 GMT</pubDate><ttl>60</ttl></channel></rss>