Workflow Security: How Cross-Step Injection Evades Detection

A new attack vector exploits multi-step workflows where injection payloads propagate across phases, evading per-step checks. The article details a scenario where a Jira ticket description carries an attack through four phases to code execution. Four defense principles are proposed, including data sanitization boundaries and input/instruction separation.