{"success":true,"data":{"id":"ai-summary-subject-prompt-injection","label":"AI summary subject prompt injection — directive language in the Subject line (\"ignore previous instructions\", \"you are now\", \"system:\") to poison Apple Intelligence / Gmail AI / Outlook Copilot inbox summaries","description":"The Subject line contains AI-directive phrases that target inbox-list summarizers in Apple Intelligence (iOS 18+), Gmail's built-in AI summarizer, and Microsoft Outlook Copilot. These summarizers stitch Subject + From + snippet together before feeding the prompt to the LLM — if the Subject contains directives like \"ignore previous instructions\", \"you are now\", \"system:\", \"disregard the above\", the summary renders the attacker's chosen text directly in the inbox list, granting authority the real email body lacks. Distinct from body-level prompt-injection signals (`ai-assistant-indirect-prompt-injection-exfil`, `llm-prompt-injection-plaintext`, `ai-agent-prompt-injection-lure`) because the Subject is the field AI summarizers read FIRST and most prominently, and because hidden-styling tricks that hide body text don't apply to the Subject header. Legitimate emails never contain prompt-injection directives in the subject — this is a nearly-zero-false-positive indicator.","tier":"danger","category":"other","isThin":false}}