Threat

New BioShocking attack manipulates AI browser into data theft

Page published

Coverage timeline

discovered huntress.com primary 30 Jun 2026bleepingcomputer.comobserved

Single-source research — one report is available.

Why it matters

Framing malicious actions as fiction can defeat AI browser guardrails, turning autonomous browsing agents into a data-exfiltration vector.

A new prompt injection attack dubbed 'BioShocking' reportedly tricks AI-powered browsers into treating risky real-world actions as part of a fictional scenario, bypassing safety guardrails and enabling data theft.