The refund that never should have happened Picture a support bot. It reads incoming tickets, decides what they need, and it can actually do things: look up an order, tag the account, issue a refund. Someone opens a ticket that says, "My package arrived broken.
Source: [Dev.to](https://dev.to/academy_agineai/prompt-injection-is-still-eating-apps-in-2026-4aop)