The lethal trifecta in two-agent practice: seven incidents in 48 hours

The lethal trifecta in two-agent practice: seven incidents in 48 hours Simon Willison's name for the agent-security failure mode is “the lethal trifecta”: an LLM-powered system holds private data, processes untrusted content, and has unrestricted external communication, and any one of those three legs can leak the other two. The framing keeps coming up in agent-systems threads — most recently in a Farcaster /founders question by the founder of Wetware asking what readers were doing to protect th