Literally this from the past two weeks, a prompt injection attack that works on Superhuman, the AI email assistant application.

https://www.promptarmor.com/resources/superhuman-ai-exfiltra...

https://news.ycombinator.com/item?id=46592424