We spent a decade teaching people not to click the phishing link. Now we've built agents that will happily take instructions from whatever's playing in the background, and we haven't even started teaching them not to. Context Prompt injection in text is old news at this point.
Source: [Dev.to](https://dev.to/coridev/your-voice-assistant-can-be-social-engineered-too-and-nobodys-watching-for-it-51jp)