Prompt-Injection Bug Hits $4B Agentic AI App 'Manus'

A prompt-injection flaw in the agentic AI app Manus reportedly enabled remote code execution and could expose credentials and tokens from connected enterprise services such as Gmail, Dropbox, and GitHub. For CIOs and technology leaders, this is a clear reminder that AI agents are not just productivity tools but high-risk integration points: any system that interprets external data can become an attack path into core business applications and sensitive data. IT organizations should treat agentic AI as part of the security perimeter, with rigorous input filtering, privilege minimization, third-party risk review, and continuous monitoring before broad deployment.