Prompt Injection

• APEX: Stopping Prompt Injection at the Execution Boundary

  APEX stops indirect prompt injection at the execution boundary with a pre-compiled task contract and decoy probes. 0% ASR on five of six benchmarks.

• GPT Security: Attack Surfaces and Production Controls

  A technical guide to GPT security covering prompt injection, custom GPTs, agent actions, data handling, and layered production controls.

• ChatGPT Exploits: Injection, Memory Hijack, Plugin Abuse

  How ChatGPT gets exploited: indirect prompt injection, CSRF memory poisoning, cross-plugin request forgery, agent tool abuse, and the controls that help.

• FlashRT Cuts the GPU Bill on Long-Context Injection Attacks

  A new red-teaming framework claims 2-7x speedup and 2-4x lower memory than nanoGCG on 32K contexts, putting GCG-class attacks within a normal budget.

• OSCP and CEH in 2026: What Carries Over to AI Red Teaming

  A free OSCP and CEH study offer raises the question every pentester should answer: which of those skills transfer to AI red teaming, and which do not.

• Insecure Output Handling Examples: XSS, SQLi, RCE

  See five insecure LLM output handling examples, from rendered XSS and query injection to code execution, plus the sink-side controls for each.

• LLM Security Vulnerabilities: What Actually Gets Exploited

  A list of LLM security vulnerabilities: the OWASP 2025 Top 10, the CVEs where they turned real, and controls for injection and insecure output handling.

• GPT-Red: What OpenAI's Prompt-Injection Attacker Proves

  OpenAI says GPT-Red beat human red teamers 84% to 13% on prompt injection. Here is what those numbers measure, and what they leave unanswered.

• LLM Attack Taxonomy: Injection, Jailbreaks, Agent Abuse

  A practitioner's map of LLM attack classes: direct and indirect prompt injection, jailbreaks, RAG poisoning, and agent tool-call abuse, mapped to OWASP.

• Prompt Injection in 2025: OpenAI vs. Broken Defenses

  OpenAI's November 2025 injection advisory versus an October 2025 paper whose adaptive attacks broke most of 12 published defenses at over 90%.

• ARSM: A Defense Pipeline for Medical LLM Agents

  ARSM-Agent chains six defense stages, from input risk perception to output control, for medical LLM agents. What each stage catches and where gaps remain.

• LLM Security FAQ: Prompt Injection, Jailbreaks, and Defenses

  Three foundational questions for anyone building or red-teaming LLM applications, covering jailbreaks, direct and indirect injection, and what defends.

• Prompt Injection Examples: A Practitioner's Attack Library

  A technical breakdown of real prompt injection examples across direct, indirect, multimodal, and RAG-poisoning attacks, with payloads and conditions.

• Direct vs. Indirect Prompt Injection: Threats and Defenses

  Direct and indirect prompt injection are fundamentally different attacks with different attack surfaces, threat actors, mitigations, and blast radius.

• Agent Tool-Use Exfiltration: Attack Chains and Controls

  Indirect prompt injection can make agents exfiltrate data, misuse tools, or execute code. Controls include least privilege, confirmation, and sandboxing.

• AI Red Teaming Hub: Your Guide to Offensive AI Security

  The central index for offensive AI security on this site: prompt injection, jailbreaks, adversarial ML, red team methodology, and the tooling behind it.

• Prompt Injection Attack Compendium (2026 Edition)

  A pillar reference on prompt injection against LLM systems: direct and indirect variants, real payloads, detection signals, and the defenses that work.

• Why Your Prompt Injection Guardrails Fail: Bypass Classes

  Prompt injection guardrails miss indirect, encoded, multimodal, multi-turn, tool-call, and adversarial suffix attacks. It outlines layered defenses.

All tags · Browse all topics