← AI security in plain English

AML.T0078

MITRE ATLAS / Drive-by Compromise

Adversaries gain access through a user visiting a website in the ordinary course of browsing, or through an AI agent retrieving web content on a user's behalf. The malicious content executes without any deliberate download.

Think of it likePicking up something contagious just by sitting in the waiting room, having touched nothing.

In plain English

Ordinary browsing is enough. When an AI agent fetches pages for a user, the agent becomes the one visiting hostile sites, and it does so far more often than any person would.