The critical, three-stage attack is now patched, but it's part of a new group of AI prompt-injection issues that use hidden URLs and other variables.

This is an ingested summary. Full reporting is available at the primary source below.