Owasp

Anatomy of Indirect Prompt Injection Hidden in Plain Text

Twenty-two techniques, three delivery methods, and one structural weakness: AI assistants cannot distinguish instructions from data. Here is how attackers exploit that, and what works as a defense.