{"id":2621,"date":"2026-05-25T00:24:40","date_gmt":"2026-05-25T00:24:40","guid":{"rendered":"https:\/\/i10xnews.kinsta.cloud\/audio-prompt-injection-ai-agents"},"modified":"2026-11-11T19:21:46","modified_gmt":"2026-11-11T19:21:46","slug":"audio-prompt-injection-ai-agents","status":"publish","type":"post","link":"https:\/\/i10x.ai\/news\/audio-prompt-injection-ai-agents","title":{"rendered":"Audio Prompt Injection: Hidden Risks for AI Voice Agents"},"content":{"rendered":"\n<h2 class=\"wp-block-heading\">In plain English<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Researchers have discovered that attackers can hide commands inside ordinary audio files like podcasts or YouTube videos using sound frequencies most people cannot hear. When an AI voice assistant listens to that audio, it turns those hidden sounds into text instructions and follows them as if a real person had spoken, potentially letting the attacker access emails, company data, or other systems the AI is allowed to use. This matters because many businesses are now deploying AI agents that can take actions on their own, and a hidden command in background music or a video call could quietly hijack those systems. If you use a personal voice assistant at home, you can reduce risk by turning off always-listening features; if your workplace uses AI voice systems for customer service or office tasks, IT teams need to add checks that filter suspicious audio and require human confirmation before the AI takes important actions.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Summary<\/h2>\n\n\n\n<h3 class=\"wp-block-heading\">What happened<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Attackers are now able to hide commands inside podcasts, videos, or background tracks using psychoacoustic masking and ultrasonic carriers. When an AI agent happens to pick up the media, its <strong>ASR (Automatic Speech Recognition)<\/strong> system turns those frequencies into text and passes the payload straight to the underlying <strong>LLM<\/strong>.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Why it matters now<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">As platforms move from simple chatbots toward autonomous agents that can actually use tools (think Claude or GPT-4o handling real workflows), the same trick scales quickly. A command no one can consciously hear could quietly direct an agent to pull data, reroute emails, or alter enterprise systems.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Who is most affected<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Teams building voice-first agents, audio platforms such as YouTube or Spotify, and IT groups rolling out AI in call centers or connected offices.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1280\" height=\"720\" src=\"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/10\/graphic-audio-prompt-injection-threat.webp\" alt=\"Infographic detailing the Agentic AI Security Gap, showing prompt injection risks, attack success rates, and enterprise software adoption by 2028.\" class=\"wp-image-2620\" srcset=\"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/graphic-audio-prompt-injection-threat.webp 1280w, https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/graphic-audio-prompt-injection-threat-300x169.webp 300w, https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/graphic-audio-prompt-injection-threat-1024x576.webp 1024w, https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/graphic-audio-prompt-injection-threat-768x432.webp 768w\" sizes=\"auto, (max-width: 1280px) 100vw, 1280px\" \/><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\">The under-reported angle<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Most coverage has treated this as a fresh take on the old DolphinAttack smart-speaker tricks, zeroing in on personal privacy. That framing misses the larger issue. ASR essentially functions as an unguarded doorway into privileged LLMs, which means ordinary background noise can become a practical way into corporate environments.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">\ud83e\udde0 Deep Dive<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Text-based prompt injection is no longer limited to screens. Recent work shows that carefully crafted audio, riding on near-ultrasonic carriers and psychoacoustic tricks, can slip past a person yet still reach an always-listening AI. Someone can be watching a regular YouTube clip or podcast while hidden frequencies issue instructions the agent follows without any visible sign.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This shifts the whole threat model. The 2017 DolphinAttack research mostly proved you could toggle hardware functions on rigid assistants. Now the target is the language model itself. Once the ASR layer transcribes the hidden audio, the LLM treats it as a normal user request. If that model has access to tools or internal systems, the attacker effectively inherits those permissions.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Public discussion has split along familiar lines. Consumer outlets tend to suggest turning off wake words; security circles focus on signal-processing quirks. Both angles overlook the real pipeline problem: there is almost no sanitization between what the ASR writes down and what the LLM is allowed to act on.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Fixing this will take more than a settings toggle. Defenders will need several coordinated controls:<\/p>\n\n\n<ul class=\"wp-block-list\"><li>Audio pre-processing that strips out suspicious ultrasonic content.<\/li><li>Anomaly checks inside the Voice Activity Detection stage.<\/li><li>Stricter policy rules on the agent side, and actions that require explicit user confirmation.<\/li><\/ul>\n\n\n<p class=\"wp-block-paragraph\">Actions that matter should probably require an explicit user confirmation step, even if that slows things down a little.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For anyone running enterprise voice systems, the message is straightforward. Call-center IVR setups that handle customer records are exposed if an attacker can slip adversarial audio into radio or hold music. As model makers push toward native multimodal agents, treating the acoustic input layer as an afterthought is no longer realistic.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">\ud83d\udcca Stakeholders &amp; Impact<\/h3>\n\n\n<ul class=\"wp-block-list\"><li><strong>AI \/ LLM Providers<\/strong>. Impact: High. Insight: Vendors need to bake real-time sanitization and adversarial checks into audio models like GPT-4o before any prompt reaches execution.<\/li><li><strong>Enterprise IT &amp; Call Centers<\/strong>. Impact: High. Insight: IVR systems and smart-office deployments face direct exposure; new zero-trust policies for agents are becoming necessary.<\/li><li><strong>Audio Platforms &amp; Creators<\/strong>: Impact: Medium. Insight: YouTube, Spotify and similar services may soon see pressure to scan uploads for hidden adversarial audio or steganography.<\/li><li><strong>End Users<\/strong>. Impact: Medium\u2013High. Insight: People will have to weigh the convenience of always-on assistants against the chance of silent hijacking.<\/li><\/ul>\n\n\n<h3 class=\"wp-block-heading\">\u270d\ufe0f About the analysis<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">This independent write-up draws together recent vulnerability reports, adversarial-audio studies, and current threat-modeling data. It is aimed at AI security engineers, CTOs, and platform architects who need to strengthen voice-agent pipelines against multimodal prompt-injection risks.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">\ud83d\udd2d i10x Perspective<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">The move from text-only models to real-time multimodal agents is outpacing the security thinking meant to support it. Audio hijacking makes the point clearly: once an AI can hear its surroundings, it inherits every messy vulnerability that comes with physical sound. If foundation-model teams cannot ensure the integrity of acoustic (or visual) inputs, enterprise adoption of agents that act on their own will run into a serious trust barrier. In the end, the most valuable infrastructure may not be raw compute speed but <strong>verifiable input security at the edge<\/strong>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Attackers can now embed invisible commands in podcasts and videos using ultrasonic carriers. Discover how this affects autonomous AI agents and the controls needed to secure voice pipelines. Learn more.<\/p>\n","protected":false},"author":2,"featured_media":2618,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"paper_title":"","paper_url":"","pdf_url":"","doi":"","arxiv_id":"","authors":"","institutions":"","paper_date":"","venue":"","peer_reviewed":false,"code_url":"","data_url":"","funding_coi":"","figure_license":"","paper_license":"","replication":"","study_models":"","study_sample":"","footnotes":"","_yoast_wpseo_primary_category":"","_nx_sec_severity":"medium","_nx_sec_affected":"","_nx_sec_status":"reported","_nx_sec_kicker":"ALERT: Audio Prompt Injection: Hidden Risks for AI Voice Agents","_nx_sec_type":"prompt-injection","_nx_sec_vendor":"","_nx_sec_fixed":"","_nx_sec_action":""},"categories":[14,65,12,28],"tags":[],"companies":[],"products":[],"class_list":["post-2621","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-agents","category-ai-security","category-policy-safety","category-security-defense"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.7 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Audio Prompt Injection: Hidden Risks for AI Voice Agents - i10X News<\/title>\n<meta name=\"description\" content=\"Attackers can now embed invisible commands in podcasts and videos using ultrasonic carriers.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/i10xnews.kinsta.cloud\/audio-prompt-injection-ai-agents\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Audio Prompt Injection: Hidden Risks for AI Voice Agents - i10X News\" \/>\n<meta property=\"og:description\" content=\"Attackers can now embed invisible commands in podcasts and videos using ultrasonic carriers.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/i10xnews.kinsta.cloud\/audio-prompt-injection-ai-agents\" \/>\n<meta property=\"og:site_name\" content=\"i10X News\" \/>\n<meta property=\"article:published_time\" content=\"2026-05-25T00:24:40+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-11-11T19:21:46+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/10\/audio-prompt-injection-threat.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"1344\" \/>\n\t<meta property=\"og:image:height\" content=\"768\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/webp\" \/>\n<meta name=\"author\" content=\"Christopher Ort\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/i10x-news-og-default-1200x630-1.png\" \/>\n<meta name=\"twitter:creator\" content=\"@i10x_ai\" \/>\n<meta name=\"twitter:site\" content=\"@i10x_ai\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Christopher Ort\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"NewsArticle\",\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/audio-prompt-injection-ai-agents#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/audio-prompt-injection-ai-agents\"},\"author\":{\"name\":\"Christopher Ort\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#\\\/schema\\\/person\\\/d410bb7ee72febefca2c9c369939219a\"},\"headline\":\"Audio Prompt Injection: Hidden Risks for AI Voice Agents\",\"datePublished\":\"2026-05-25T00:24:40+00:00\",\"dateModified\":\"2026-11-11T19:21:46+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/audio-prompt-injection-ai-agents\"},\"wordCount\":859,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/audio-prompt-injection-ai-agents#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/audio-prompt-injection-threat.webp\",\"articleSection\":[\"Agents\",\"AI Security\",\"Policy &amp; Safety\",\"Security &amp; Defense\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/audio-prompt-injection-ai-agents#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/audio-prompt-injection-ai-agents\",\"url\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/audio-prompt-injection-ai-agents\",\"name\":\"Audio Prompt Injection: Hidden Risks for AI Voice Agents - i10X News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/audio-prompt-injection-ai-agents#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/audio-prompt-injection-ai-agents#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/audio-prompt-injection-threat.webp\",\"datePublished\":\"2026-05-25T00:24:40+00:00\",\"dateModified\":\"2026-11-11T19:21:46+00:00\",\"description\":\"Attackers can now embed invisible commands in podcasts and videos using ultrasonic carriers.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/audio-prompt-injection-ai-agents#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/audio-prompt-injection-ai-agents\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/audio-prompt-injection-ai-agents#primaryimage\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/audio-prompt-injection-threat.webp\",\"contentUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/audio-prompt-injection-threat.webp\",\"width\":1344,\"height\":768,\"caption\":\"Abstract visualization of audio waves transforming into data processed by ASR and LLM systems, illustrating the AI voice agent pipeline.\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/audio-prompt-injection-ai-agents#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/i10x.ai\\\/news\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Audio Prompt Injection: Hidden Risks for AI Voice Agents\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#website\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\",\"name\":\"i10X News\",\"description\":\"Stay updated with the latest news and announcements from i10X.\",\"publisher\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/i10x.ai\\\/news?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#organization\",\"name\":\"i10X\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/i10x-logo-180.png\",\"contentUrl\":\"https:\\\/\\\/i10xnews.kinsta.cloud\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/i10x-logo-180.png\",\"width\":180,\"height\":180,\"caption\":\"i10X\"},\"image\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/i10x_ai\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/i10x-ai\",\"https:\\\/\\\/instagram.com\\\/i10x.ai\",\"https:\\\/\\\/www.youtube.com\\\/@i10X_ai_official\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#\\\/schema\\\/person\\\/d410bb7ee72febefca2c9c369939219a\",\"name\":\"Christopher Ort\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/christopher-ort-192.webp\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/christopher-ort-192.webp\",\"contentUrl\":\"https:\\\/\\\/i10x.ai\\\/news\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/christopher-ort-192.webp\",\"caption\":\"Christopher Ort\"},\"description\":\"Christopher Ort handles SEO, AI agent workflows and PR & partnerships at i10x.ai, the all-in-one AI workspace built by i10X Global Pte. Ltd. in Singapore. He is a graduate of Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU). He is the author of \u201cThe Style Penalty\u201d, a study published on SSRN that analyses 1,576 evaluation decisions by four frontier AI models to show how AI-written CVs fare in automated hiring screens; the research has been covered by heise online and t3n.\",\"url\":\"https:\\\/\\\/i10x.ai\\\/news\\\/author\\\/christopher-ort\",\"sameAs\":[\"https:\\\/\\\/i10x.ai\\\/blog\\\/author\\\/christopher-ort\"],\"worksFor\":{\"@id\":\"https:\\\/\\\/i10x.ai\\\/news\\\/#organization\"},\"alumniOf\":{\"@type\":\"EducationalOrganization\",\"name\":\"Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU)\",\"url\":\"https:\\\/\\\/www.fau.eu\"},\"subjectOf\":[{\"@type\":\"CreativeWork\",\"url\":\"https:\\\/\\\/papers.ssrn.com\\\/abstract=7426699\",\"name\":\"The Style Penalty: How AI Resume-Writing Tools Shape Outcomes in Automated Hiring Screens\"},{\"@type\":\"CreativeWork\",\"url\":\"https:\\\/\\\/www.heise.de\\\/news\\\/KI-Chatbots-bewerten-KI-Lebenslaeufe-Claude-findet-sich-besser-als-GPT-11317531.html\",\"name\":\"KI-Chatbots bewerten KI-Lebensl\u00e4ufe: Claude findet sich besser als GPT\"},{\"@type\":\"CreativeWork\",\"url\":\"https:\\\/\\\/t3n.de\\\/news\\\/bewerbung-schreiben-ki-5-fehler-1747190\\\/\",\"name\":\"Bewerbung mit KI schreiben: Diese 5 Fehler solltet ihr laut Studien vermeiden\"}]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Audio Prompt Injection: Hidden Risks for AI Voice Agents - i10X News","description":"Attackers can now embed invisible commands in podcasts and videos using ultrasonic carriers.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/i10xnews.kinsta.cloud\/audio-prompt-injection-ai-agents","og_locale":"en_US","og_type":"article","og_title":"Audio Prompt Injection: Hidden Risks for AI Voice Agents - i10X News","og_description":"Attackers can now embed invisible commands in podcasts and videos using ultrasonic carriers.","og_url":"https:\/\/i10xnews.kinsta.cloud\/audio-prompt-injection-ai-agents","og_site_name":"i10X News","article_published_time":"2026-05-25T00:24:40+00:00","article_modified_time":"2026-11-11T19:21:46+00:00","og_image":[{"width":1344,"height":768,"url":"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/10\/audio-prompt-injection-threat.webp","type":"image\/webp"}],"author":"Christopher Ort","twitter_card":"summary_large_image","twitter_image":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/i10x-news-og-default-1200x630-1.png","twitter_creator":"@i10x_ai","twitter_site":"@i10x_ai","twitter_misc":{"Written by":"Christopher Ort","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"NewsArticle","@id":"https:\/\/i10xnews.kinsta.cloud\/audio-prompt-injection-ai-agents#article","isPartOf":{"@id":"https:\/\/i10xnews.kinsta.cloud\/audio-prompt-injection-ai-agents"},"author":{"name":"Christopher Ort","@id":"https:\/\/i10x.ai\/news\/#\/schema\/person\/d410bb7ee72febefca2c9c369939219a"},"headline":"Audio Prompt Injection: Hidden Risks for AI Voice Agents","datePublished":"2026-05-25T00:24:40+00:00","dateModified":"2026-11-11T19:21:46+00:00","mainEntityOfPage":{"@id":"https:\/\/i10xnews.kinsta.cloud\/audio-prompt-injection-ai-agents"},"wordCount":859,"commentCount":0,"publisher":{"@id":"https:\/\/i10x.ai\/news\/#organization"},"image":{"@id":"https:\/\/i10xnews.kinsta.cloud\/audio-prompt-injection-ai-agents#primaryimage"},"thumbnailUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/audio-prompt-injection-threat.webp","articleSection":["Agents","AI Security","Policy &amp; Safety","Security &amp; Defense"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/i10xnews.kinsta.cloud\/audio-prompt-injection-ai-agents#respond"]}]},{"@type":"WebPage","@id":"https:\/\/i10xnews.kinsta.cloud\/audio-prompt-injection-ai-agents","url":"https:\/\/i10xnews.kinsta.cloud\/audio-prompt-injection-ai-agents","name":"Audio Prompt Injection: Hidden Risks for AI Voice Agents - i10X News","isPartOf":{"@id":"https:\/\/i10x.ai\/news\/#website"},"primaryImageOfPage":{"@id":"https:\/\/i10xnews.kinsta.cloud\/audio-prompt-injection-ai-agents#primaryimage"},"image":{"@id":"https:\/\/i10xnews.kinsta.cloud\/audio-prompt-injection-ai-agents#primaryimage"},"thumbnailUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/audio-prompt-injection-threat.webp","datePublished":"2026-05-25T00:24:40+00:00","dateModified":"2026-11-11T19:21:46+00:00","description":"Attackers can now embed invisible commands in podcasts and videos using ultrasonic carriers.","breadcrumb":{"@id":"https:\/\/i10xnews.kinsta.cloud\/audio-prompt-injection-ai-agents#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/i10xnews.kinsta.cloud\/audio-prompt-injection-ai-agents"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/i10xnews.kinsta.cloud\/audio-prompt-injection-ai-agents#primaryimage","url":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/audio-prompt-injection-threat.webp","contentUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/audio-prompt-injection-threat.webp","width":1344,"height":768,"caption":"Abstract visualization of audio waves transforming into data processed by ASR and LLM systems, illustrating the AI voice agent pipeline."},{"@type":"BreadcrumbList","@id":"https:\/\/i10xnews.kinsta.cloud\/audio-prompt-injection-ai-agents#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/i10x.ai\/news"},{"@type":"ListItem","position":2,"name":"Audio Prompt Injection: Hidden Risks for AI Voice Agents"}]},{"@type":"WebSite","@id":"https:\/\/i10x.ai\/news\/#website","url":"https:\/\/i10x.ai\/news","name":"i10X News","description":"Stay updated with the latest news and announcements from i10X.","publisher":{"@id":"https:\/\/i10x.ai\/news\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/i10x.ai\/news?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/i10x.ai\/news\/#organization","name":"i10X","url":"https:\/\/i10x.ai\/news\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/i10x.ai\/news\/#\/schema\/logo\/image\/","url":"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/10\/i10x-logo-180.png","contentUrl":"https:\/\/i10xnews.kinsta.cloud\/wp-content\/uploads\/2026\/10\/i10x-logo-180.png","width":180,"height":180,"caption":"i10X"},"image":{"@id":"https:\/\/i10x.ai\/news\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/i10x_ai","https:\/\/www.linkedin.com\/company\/i10x-ai","https:\/\/instagram.com\/i10x.ai","https:\/\/www.youtube.com\/@i10X_ai_official"]},{"@type":"Person","@id":"https:\/\/i10x.ai\/news\/#\/schema\/person\/d410bb7ee72febefca2c9c369939219a","name":"Christopher Ort","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/christopher-ort-192.webp","url":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/christopher-ort-192.webp","contentUrl":"https:\/\/i10x.ai\/news\/wp-content\/uploads\/2026\/10\/christopher-ort-192.webp","caption":"Christopher Ort"},"description":"Christopher Ort handles SEO, AI agent workflows and PR & partnerships at i10x.ai, the all-in-one AI workspace built by i10X Global Pte. Ltd. in Singapore. He is a graduate of Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU). He is the author of \u201cThe Style Penalty\u201d, a study published on SSRN that analyses 1,576 evaluation decisions by four frontier AI models to show how AI-written CVs fare in automated hiring screens; the research has been covered by heise online and t3n.","url":"https:\/\/i10x.ai\/news\/author\/christopher-ort","sameAs":["https:\/\/i10x.ai\/blog\/author\/christopher-ort"],"worksFor":{"@id":"https:\/\/i10x.ai\/news\/#organization"},"alumniOf":{"@type":"EducationalOrganization","name":"Friedrich-Alexander-Universit\u00e4t Erlangen-N\u00fcrnberg (FAU)","url":"https:\/\/www.fau.eu"},"subjectOf":[{"@type":"CreativeWork","url":"https:\/\/papers.ssrn.com\/abstract=7426699","name":"The Style Penalty: How AI Resume-Writing Tools Shape Outcomes in Automated Hiring Screens"},{"@type":"CreativeWork","url":"https:\/\/www.heise.de\/news\/KI-Chatbots-bewerten-KI-Lebenslaeufe-Claude-findet-sich-besser-als-GPT-11317531.html","name":"KI-Chatbots bewerten KI-Lebensl\u00e4ufe: Claude findet sich besser als GPT"},{"@type":"CreativeWork","url":"https:\/\/t3n.de\/news\/bewerbung-schreiben-ki-5-fehler-1747190\/","name":"Bewerbung mit KI schreiben: Diese 5 Fehler solltet ihr laut Studien vermeiden"}]}]}},"_links":{"self":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/posts\/2621","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/comments?post=2621"}],"version-history":[{"count":3,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/posts\/2621\/revisions"}],"predecessor-version":[{"id":7429,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/posts\/2621\/revisions\/7429"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/media\/2618"}],"wp:attachment":[{"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/media?parent=2621"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/categories?post=2621"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/tags?post=2621"},{"taxonomy":"company","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/companies?post=2621"},{"taxonomy":"product","embeddable":true,"href":"https:\/\/i10x.ai\/news\/wp-json\/wp\/v2\/products?post=2621"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}