This 'ZombieAgent' zero click vulnerability allows for silent account takeover - here's what we know

Techradar • January 9, 2026

The feature is now called 'apps' but, according to security researchers Radware, also opens up the tool to a major vulnerability - prompt injection ...

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

ZombieAgent Zero Click Vulnerability Enables Silent Account Takeover The 'ZombieAgent' vulnerability allows for silent account takeovers through a zero click exploit. Security researchers from Radware have indicated that this vulnerability is linked to prompt injection issues in the tool, which has been rebranded as 'apps'. OpenAI had previously addressed a similar vulnerability in ChatGPT. 2 sources 26

This 'ZombieAgent' zero click vulnerability allows for silent account takeover - here's what we know

The full story

Extracted Entities

Attack Types (1)

Vulnerabilities (1)