Google Deepmind researchers have published the first systematic framework cataloguing how malicious web content can manipulate, hijack, and weaponize autonomous AI agents against their own users. Key Takeaways: Google Deepmind researchers identified 6 AI agent trap categories, with content injection success rates reaching 86%. Behavioural Control Traps targeting Microsoft M365 Copilot achieved 10/10 data exfiltration
