.svg){kind=small}
.svg)
.svg)
.png)
.svg)
Your team wants AI agents in the inbox. Picture an AI assistant triaging a mailbox and drafting replies before your employees finish their coffee. Now consider what that implies: anyone outside your company can email instructions straight to those highly permissioned agents, and an agent cannot reliably separate an instruction from the content of the email.
To say yes or even just cover shadow AI usage: your email security has to catch instructions aimed at your agents, as well as threats aimed at your employees.
An outsider emails your agent and your agent obeys
The agent reads every word of an email, including hidden content your employee never sees. Attackers hide instructions in hidden text, obfuscated formatting, or the description of a calendar invite. Your employee sees a routine message. Your agent sees a command.
The agent then acts with your employee’s level of access. A compromised agent can approve refunds or exfiltrate data, then move laterally as a highly permissioned insider.
Attackers are already writing for AI readers
In June, our Threat Detection Team reported on a credential phishing campaign that carried a second payload written to fool AI-based detection. Our ML Research and Detection teams also explained what prompt injection looks like in real email, which differs from the proof-of-concepts in the headlines.
How to flip the script, and safely enable AI agents for employee email
Here is what to require of your email security, and how Sublime delivers it.
Email Prompt Injection Detection is in public beta today
Already a Sublime customer? This ships in the Core Feed. If you auto-enable Core Feed detections and use the Send suspicious messages to ASA automation, there is nothing to turn on. If you don’t, your account team will walk you through enabling both.
Want to know how many land in your environment? Ask your account team.
Not a customer yet? Get a demo to see Sublime stop a prompt injection attempt on a live message.
Get the latest
Sublime releases, detections, blogs, events, and more directly to your inbox.
.svg)
.png)
.png)
