Indirect prompt injection
2 articles
Clinejection: How a Prompt Injection Infected 4,000 Terminals
How a single GitHub issue turned an AI triage bot into an entry point for a supply chain attack, step by step.
Anatomy of Indirect Prompt Injection Hidden in Plain Text
Twenty-two techniques, three delivery methods, and one structural weakness: AI assistants cannot distinguish instructions from data. Here is how attackers exploit that, and what works as a defense.