Your shopping agent reads the reviews. Attackers write the reviews. Guess who wins.

F-Secure built an AI shopping agent and got it to hand a user's name, birth date, and SSN to a phishing site — not with a hacky command, but by hiding an instruction inside product content that looked like a normal step toward buying. The lesson isn't 'add a filter.' It's that the agent can't tell whose instruction it's following.