New font-rendering trick hides malicious commands from AI tools Researchers at LayerX demonstrated a font-rendering attack that hides malicious commands in webpage HTML using custom fonts and CSS so AI assistants analyzing the DOM see only benign text while users see dangerous instructions. The proof-of-concept fooled multiple popular assistants and prompted recommendations to compare rendered pages with the DOM and treat fonts/CSS as an attack surface. #LayerX #ChatGPT

Researchers at LayerX revealed a font-rendering trick that hides malicious commands from AI tools by displaying encoded instructions via custom fonts and CSS, while the DOM shows only benign text. #FontAttack #AItrust #Japan