Retail AI Shopping Bot Exploit Exposes Security Risks
Black Hat researchers demonstrated how hidden instructions could manipulate a major retailer’s AI shopping assistant and expose sensitive system information.
Zero Click Project curates agentic commerce news for operators tracking AI shopping agents, zero-click commerce, and the industry updates shaping how products are discovered, evaluated, and bought. Use this page to follow platform launches, retailer moves, protocol changes, and payment infrastructure developments across the emerging agentic commerce stack.
Editorial summary of the dominant themes emerging from the most recent stories in this feed.
New Logica Research for Commerce and PayPal finds that shoppers see value in agents that save time and money across the U.S., U.K. and Australia. Purchase confirmation, security and control remain adoption requirements, suggesting delegated shopping will expand in stages rather than arrive as fully autonomous buying overnight. Recent examples include Schnucks introduces an agentic assistant for personalized grocery s…; Study finds Amazon and Walmart agents detect but do not flag false….
A U.S. appeals court overturned the temporary ban on Perplexity’s AI shopping tools accessing Amazon. The ruling does not settle every liability question, but it raises the stakes for marketplaces: agents may increasingly act as a user’s interface to catalogues that platforms have historically controlled directly. Recent examples include Appeals Court Lets Perplexity’s AI Shopping Tools Access Amazon; Synchrony Partners With OpenAI on ChatGPT Shopping Payments.
Synchrony’s partnership with OpenAI points to the next constraint in agentic commerce: connecting recommendations to authorized payment. With full integration estimated at six to 12 months, the work ahead is less about conversational product discovery than tokenization, permissions, fraud controls and issuer participation. Recent examples include ESW links Microsoft Copilot discovery to global checkout; Universal Commerce Protocol Outlines Open Rails for Agentic Commerce.
Adobe data cited by WWD shows AI-referred traffic to retail sites rose 62% in July and outperformed on conversion and engagement. For brands, the immediate implication is practical: product data, availability and landing pages must serve both human shoppers and the systems that increasingly influence what they see. Recent examples include Retail AI Shopping Bot Exploit Exposes Security Risks; Grocery retailers are bringing conversational AI into the shopping….
Evergreen explainers and implementation guides for the agentic commerce stack.
Editorial takes and strategic analysis on what the news means for operators.
Upcoming conferences and industry gatherings shaping agentic commerce.
Key definitions for agentic commerce, AI shopping agents, and zero-click commerce.
Showing 152 articles
Black Hat researchers demonstrated how hidden instructions could manipulate a major retailer’s AI shopping assistant and expose sensitive system information.
A U.S. appeals court overturned a temporary ban on Perplexity’s AI-powered shopping tools accessing Amazon, a consequential ruling for agent-led shopping on major platforms.
Synchrony is working with OpenAI to bring its payment cards into ChatGPT shopping, with full payment integration expected to take six to 12 months.
Three grocery-sector examples show retailers using chatbots and AI assistants to move shoppers beyond keyword search and filters toward conversational product discovery.
Schnucks is rolling out an agentic shopping assistant designed to tailor grocery discovery around customers' health and wellness preferences.
A study reported by Reuters says Amazon and Walmart shopping assistants can identify false "Made in USA" claims but do not surface those findings to shoppers, raising questions about platform accountability.
Groceryshop's 2026 program includes an AI-powered shopping series on retail discovery in answer engines, retailer-built shopping assistants, and personalization across digital and store experiences.
Reporting on allegations that Phia's shopping extension claimed affiliate credit through forced clicks illustrates how AI shopping tools can disrupt attribution, publisher economics, and consumer trust.
Kohl's has developed its seasonal gift finder into a digital assistant for product discovery, illustrating the retailer-led path into conversational shopping.
ESW's agentic-commerce integration with Microsoft Copilot connects AI-led product discovery with localized checkout for brands selling internationally.
Adobe found shoppers referred to retail sites by AI chatbots converted 40% more often during Prime Day than those arriving from search, email, or social. Amazon is simultaneously blocking rival shopping agents while developing its own assistant.
Walmart executives say their AI shopping agent, Sparky, is helping drive sales—an early indicator of how a retailer-owned agent could reshape product discovery and conversion.
A Google-linked Universal Commerce Protocol update describes an open architecture for checkout, catalog, cart, orders, REST, MCP, and A2A transport, with Shopify, Walmart, Target, Etsy, Adyen, Mastercard, Stripe, and Visa named as partners.
Target is expanding conversational shopping across Google, Microsoft Copilot, and ChatGPT, tying product discovery, account access, loyalty benefits, and checkout into the AI surfaces where more shoppers are beginning their journeys.
Visa is embedding its payment network into ChatGPT so AI agents can shop and complete transactions for users, a clear signal that payment authorization is moving into agent-mediated commerce flows.