Agent Security
-
APEX: Stopping Prompt Injection at the Execution Boundary
APEX stops indirect prompt injection at the execution boundary with a pre-compiled task contract and decoy probes. 0% ASR on five of six benchmarks.
-
GPT Security: Attack Surfaces and Production Controls
A technical guide to GPT security covering prompt injection, custom GPTs, agent actions, data handling, and layered production controls.
-
ChatGPT Exploits: Injection, Memory Hijack, Plugin Abuse
How ChatGPT gets exploited: indirect prompt injection, CSRF memory poisoning, cross-plugin request forgery, agent tool abuse, and the controls that help.
-
Insecure Output Handling Examples: XSS, SQLi, RCE
See five insecure LLM output handling examples, from rendered XSS and query injection to code execution, plus the sink-side controls for each.
-
LLM Security Vulnerabilities: What Actually Gets Exploited
A list of LLM security vulnerabilities: the OWASP 2025 Top 10, the CVEs where they turned real, and controls for injection and insecure output handling.
-
GPT-Red: What OpenAI's Prompt-Injection Attacker Proves
OpenAI says GPT-Red beat human red teamers 84% to 13% on prompt injection. Here is what those numbers measure, and what they leave unanswered.
-
LLM Attack Taxonomy: Injection, Jailbreaks, Agent Abuse
A practitioner's map of LLM attack classes: direct and indirect prompt injection, jailbreaks, RAG poisoning, and agent tool-call abuse, mapped to OWASP.
-
Prompt Injection in 2025: OpenAI vs. Broken Defenses
OpenAI's November 2025 injection advisory versus an October 2025 paper whose adaptive attacks broke most of 12 published defenses at over 90%.
-
Why Red Teaming Cannot Certify Governance Claims
A position paper formalizes the mismatch between what AI governance frameworks ask evaluators to verify and what behavioral red teaming can actually show.
-
ARSM: A Defense Pipeline for Medical LLM Agents
ARSM-Agent chains six defense stages, from input risk perception to output control, for medical LLM agents. What each stage catches and where gaps remain.
-
Prompt Injection Examples: A Practitioner's Attack Library
A technical breakdown of real prompt injection examples across direct, indirect, multimodal, and RAG-poisoning attacks, with payloads and conditions.