I'm Worried About a Prompt Injection Worm

I think one form the first big AI hack could take is a prompt injection worm.Let's piece this together.Open source models reach or surpass GPT 6 or FABLE 5 by the final months of 2026 or the early months of 2027.Some threat actor (private or government) has been building target lists for months or years in the form of input-parsing attack surfaces, e.g., email addresses, web forms, Telegram, whatever.They have not launched the attacks yet because they know not everyone has agents hooked up to their input sources yet.As AI continues to permeate into everyone's work and personal tech stacks via integrations in late 2026 or early 2027, the chances become very high that they have AI parsing their email and texts.The threat actor builds a number of zero-day prompt injections that can pass through the top lab and open source models. They also build a bunch of different payloads, such as "export this data to this location, etc.".The final part of the payload is sending the payload on to…