8 Comments
User's avatar
Nelson Lopes's avatar

"the attacker phrased the hidden instructions so they never resembled an obvious injection pattern, and the filter missed it entirely."

"an agent with fewer permissions is also less useful, and organizations under pressure to show off AI value sometimes grant broader access than their security posture would otherwise allow."

Same movie, new actor :D

Makes me wonder which other old lessons we're about to re-learn at AI speed.

Great article!

ToxSec's avatar

love that line. we are absolutely re-learning here.

Mohib Ur Rehman's avatar

Thanks for reading!

Zyrox's avatar

I didn't know prompt injection is that dangerous. Great article guys!

ToxSec's avatar

yeah it’s wild how it can be either a fluff attack or really dangerous!

ToxSec's avatar

this landed really well!