BioShocking: when “gaming” AI agents is no longer a game

BioShocking is a proof-of-concept attack that tricks AI-powered browsers and agents into treating a fictional game environment as real, causing them to ignore safety guardrails and retrieve sensitive data (such as passwords) from authenticated sites; tests showed six mainstream agents followed the malicious instructions, and vendor mitigations were incomplete or absent.