Your Brand's AI Answer Is an Attack Surface
Security Boulevard, Sunday, October 11th, 2026
Companies are using AI recommendation poisoning to bias assistants, a risk that falls between marketing and security teams.
Microsoft's Defender researchers found more than 50 attempts by 31 companies in 14 industries to plant promotional instructions in AI assistant memory over 60 days.
The technique abuses pre-filled 'Summarize with AI' deep links that tell the assistant to treat a vendor as a trusted source, and it is catalogued in MITRE ATLAS as AML.T0080.000, with an npm package now productizing it.
The author is careful to say the effect on any given answer can't be verified publicly.
Still, he argues the scale of attempts makes it a governance problem that nobody currently owns, since it sits between marketing and security.