Fetching from the wire…
01
02
03
04
05
06
07
08
Security2026-06-14 · source-backed
Minghao Luo and Liang Chen's benchmark spans 225 real products across 15 categories, and every tested search-augmented LLM could be manipulated into recommending fake products (arXiv). A single polluted page yields fooled rates up to 27%; replacing the top-3 retrieved pages pushes it to 73.8%. The nastiest finding: reasoning models generate "spurious social proof" to justify the false picks. Reasoning amplifies the attack instead of catching it. If you're shipping RAG over open web content, this is your Agentjacking analog. Retrieved content is untrusted input.
Each link below shares sources, entities, or timing with this story.
Simon Willison released LLM / Shared entity: LLM / What happened next / Tension
Linked by a graph relationship (Simon Willison released LLM); both cover LLM; picks up the LLM thread on 2026-06-19.
Linked by a graph relationship (Simon Willison released LLM); both cover LLM; picks up the LLM thread on 2026-06-18.
Simon Willison released LLM / Shared entities
Linked by a graph relationship (Simon Willison released LLM); both cover Agentjacking, FORGE.
FORGE built by Mistral / Shared entity: RAG / What happened next
Linked by a graph relationship (FORGE built by Mistral); both cover RAG; picks up the RAG thread on 2026-06-25.
LLM uses OpenAI / Shared entity: LLM / What happened next
Linked by a graph relationship (LLM uses OpenAI); both cover LLM; picks up the LLM thread on 2026-06-19.
LLM uses OpenAI / Shared entity: RAG / Earlier coverage
Linked by a graph relationship (LLM uses OpenAI); both cover RAG; earlier RAG coverage from 2026-04-24.
Simon Willison released LLM / Shared entity: LLM / What happened next
Linked by a graph relationship (Simon Willison released LLM); both cover LLM; picks up the LLM thread on 2026-06-22.
Simon Willison released LLM / Shared entity: LLM / Earlier coverage
Linked by a graph relationship (Simon Willison released LLM); both cover LLM; earlier LLM coverage from 2026-06-10.