CONNECT WITH US
Fintech

Fintech

AI Agents in Finance Can Be Hijacked, ClawSecure Finds

Global Fintech Series logo

Published on

Add as a preferred source on Google
AI Agents in Finance Can Be Hijacked, ClawSecure Finds

AI agents in finance can be hijacked through ordinary content, an email, a shared document or a support ticket, to steal credentials, drain financial accounts, and exfiltrate private data without the victim ever making a mistake, according to The AI Agent Threat Report from ClawSecure. ClawSecure released the report in two volumes on September 24, 2026, drawing on research conducted from May through July 2026. Its findings speak directly to anyone evaluating AI agents for finance.

AI agents are already running finances, businesses, and critical systems, and every one of them can be hijacked by the content it reads”

For AI agents in finance, the report’s most specific findings concern a worker model and the manager model placed above it. ClawSecure found that the cheap worker tier one major lab markets for real-time financial monitoring obeyed hidden attacker commands 91.7% of the time (11 of 12). The problem did not end at the worker. ClawSecure found that the manager model on top of that worker passed the poisoned result straight through on all 4 of 4 scenarios (100%).

Read More on Fintech : Global FinTech Interview: AI and the future of fintech with Hugh Cumming, CTO, Vena

ClawSecure found that, in one payload, the worker model did the attacker’s extra work for free, encoding the victim’s data into the exfiltration link itself, unprompted. According to ClawSecure’s research, a hijacked agent can drain credentials and API keys and pull financial data along with customers’ private records, and it can leave the user looking at a clean screen that says everything is fine, the entire time.


Source link
Related Topics:Fintech

Disclaimer

We strive to uphold the highest ethical standards in all of our reporting and coverage. We TheMorningPulse.fyi want to be transparent with our readers about any potential conflicts of interest that may arise in our work. It's possible that some of the investors we feature may have connections to other businesses, including competitors or companies we write about. However, we want to assure our readers that this will not have any impact on the integrity or impartiality of our reporting. We are committed to delivering accurate, unbiased news and information to our audience, and we will continue to uphold our ethics and principles in all of our work. Thank you for your trust and support.