--- title: Hijacking Google’s CI/CD Through Prompt Injection:The... description: This talk was recorded at NDC Security in Oslo, Norway. #ndcsecurity #ndcconferences #security #developer #softwaredeveloper Attend the next NDC... canonical: https://daily.dev/posts/hijacking-google-s-ci-cd-through-prompt-injection-the-new-era-of-ai-based-exploits-mackenzie-jackson-avhbob3nu twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Hijacking Google’s CI/CD Through Prompt Injection:The New Era of AI-Based Exploits-Mackenzie Jackson | daily.dev og:description: This talk was recorded at NDC Security in Oslo, Norway. #ndcsecurity #ndcconferences #security #developer #softwaredeveloper Attend the next NDC... og:url: https://daily.dev/posts/hijacking-google-s-ci-cd-through-prompt-injection-the-new-era-of-ai-based-exploits-mackenzie-jackson-avhbob3nu og:image: https://api.daily.dev/og/posts/aVHboB3nU.png og:image:alt: Hijacking Google’s CI/CD Through Prompt Injection:The New Era of AI-Based Exploits-Mackenzie Jackson og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Hijacking Google’s CI/CD Through Prompt Injection:The New Era of AI-Based Exploits-Mackenzie Jackson **[NDC Conferences](https://daily.dev/sources/ndc)** · 33 min read · 0 upvotes · 0 comments ## Summary This talk was recorded at NDC Security in Oslo, Norway. #ndcsecurity #ndcconferences #security #developer #softwaredeveloper Attend the next NDC conference near you: https://ndcconferences.com https://ndc-security.com/ Subscribe to our YouTube channel and learn every day: @NDC Follow our Social Media! https://www.facebook.com/ndcconferences https://twitter.com/NDC_Conferences https://www.instagram.com/ndc_conferences #applicationsecurity #architecture #devops #supplychain #testing #cicdpipeline #ai #github Prompt injection has long been treated as an amusing quirk of large language models, a curiosity demonstrated through simplistic examples like “ignore previous instructions.” Those surface-level attacks have been largely addressed, and with that, much of the security community moved on. But the real risk was never about tricking chatbots. As AI systems become embedded into CI/CD pipelines, build tooling, automation frameworks, and production infrastructure, prompt injection evolves from a toy problem into a true security vulnerability. When AI agents are granted access to privileged tools, shell commands, GitHub/GitLab tokens, issue editing, code generation, untrusted text becomes an execution vector. Aikido Security recently uncovered a critical, widespread vulnerability pattern inside GitHub Actions workflows used by multiple Fortune 500 companies, including Google, where prompt injection enabled unauthorized command execution and credential exfiltration directly from their pipelines. These were not hypothetical weaknesses: the attacks were reproduced in controlled environments and confirmed by affected companies. This talk examines why prompt injection becomes fundamentally dangerous when AI agents act inside trusted automation systems, and why solving it is far harder than filtering keywords or blocking certain phrases. We will draw parallels to SQL injection, another vulnerability once thought “solved”, and explore how we can protect ourselves against this new classification threat. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [Don’t just attend KubeCon \+ CloudNativeCon, Merge Forward your experience\!](https://daily.dev/posts/don-t-just-attend-kubecon-cloudnativecon-merge-forward-your-experience--l0rpp73x8) · CNCF · 1 upvotes · 0 comments - [Announcing H2 2026 KCDs](https://daily.dev/posts/announcing-h2-2026-kcds-m96goajm1) · CNCF · 1 upvotes · 0 comments - [Two months of Open Community Groups](https://daily.dev/posts/two-months-of-open-community-groups-asf52zhbs) · CNCF · 0 upvotes · 0 comments - [CNCF Unveils Schedule for KubeCon \+ CloudNativeCon Europe 2026](https://daily.dev/posts/cncf-unveils-schedule-for-kubecon-cloudnativecon-europe-2026-ikhcoa5cb) · CNCF · 2 upvotes · 0 comments - [CNCF Debuts KubeCon \+ CloudNativeCon Japan 2026 Schedule](https://daily.dev/posts/cncf-debuts-kubecon-cloudnativecon-japan-2026-schedule-xp5pyudub) · CNCF · 1 upvotes · 0 comments --- Tags: [#devops](https://daily.dev/tags/devops), [#testing](https://daily.dev/tags/testing), [#architecture](https://daily.dev/tags/architecture), [#supply-chain](https://daily.dev/tags/supply-chain), [#appsec](https://daily.dev/tags/appsec) [View this post on daily.dev](https://daily.dev/posts/hijacking-google-s-ci-cd-through-prompt-injection-the-new-era-of-ai-based-exploits-mackenzie-jackson-avhbob3nu) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Hijacking Google’s CI/CD Through Prompt Injection:The New Era of AI-Based Exploits-Mackenzie Jackson","url":"https://daily.dev/posts/hijacking-google-s-ci-cd-through-prompt-injection-the-new-era-of-ai-based-exploits-mackenzie-jackson-avhbob3nu","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/hijacking-google-s-ci-cd-through-prompt-injection-the-new-era-of-ai-based-exploits-mackenzie-jackson-avhbob3nu"},"datePublished":"2026-03-23T14:17:21.879Z","dateModified":"2026-03-23T16:04:18.644Z","description":"This talk was recorded at NDC Security in Oslo, Norway. #ndcsecurity #ndcconferences #security #developer #softwaredeveloper \n\nAttend the next NDC...","image":"https://i.ytimg.com/vi/OtG6hBDSt24/sddefault.jpg","thumbnailUrl":"https://i.ytimg.com/vi/OtG6hBDSt24/sddefault.jpg","isAccessibleForFree":true,"articleSection":"NDC Conferences","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"NDC Conferences","logo":"https://media.daily.dev/image/upload/s--SiIyojEj--/f_auto/v1748760369/logos/ndc","url":"https://daily.dev/sources/ndc"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/hijacking-google-s-ci-cd-through-prompt-injection-the-new-era-of-ai-based-exploits-mackenzie-jackson-avhbob3nu","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"devops,testing,architecture,supply-chain,appsec","timeRequired":"PT33M","video":{"@type":"VideoObject","name":"Hijacking Google’s CI/CD Through Prompt Injection:The New Era of AI-Based Exploits-Mackenzie Jackson","description":"This talk was recorded at NDC Security in Oslo, Norway. #ndcsecurity #ndcconferences #security #developer #softwaredeveloper \n\nAttend the next NDC...","thumbnailUrl":"https://i.ytimg.com/vi/OtG6hBDSt24/sddefault.jpg","uploadDate":"2026-03-23T14:17:21.879Z","duration":"PT33M","url":"https://api.daily.dev/r/aVHboB3nU","embedUrl":"https://www.youtube.com/embed/OtG6hBDSt24"}} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"NDC Conferences","item":"https://daily.dev/sources/ndc"},{"@type":"ListItem","position":3,"name":"Hijacking Google’s CI/CD Through Prompt Injection:The New Era of AI-Based Exploits-Mackenzie Jackson"}]} ```