Indirect Prompt Injection
-
Prompt Injection in AI Agents Explained
Agents turn prompt injection into tool calls, code execution and data theft. How the attack works when a model can act, and what contains it.
-
Indirect Prompt Injection: How These Attacks Work
Indirect prompt injection hides instructions in content the model retrieves. The delivery channels, the attacker objectives, and what benchmarks measure.
-
OWASP LLM Top 10 Prompt Injection (LLM01:2025) Explained
LLM01 in the OWASP LLM Top 10 is prompt injection — and it held the top spot in both the 2023 and 2025 editions. What the 2025 entry actually says.
-
Invisible Prompt Injection via Unicode Tag Smuggling
Unicode Tag characters let attackers embed invisible prompt injection payloads that still tokenize as instructions. How it works and what stops it.
-
Bing Chat Prompt Injection: The Sydney Incident
This incident analysis covers Bing Chat system-prompt extraction, persona manipulation, and indirect prompt injection through retrieved web content.
-
Llama 3 RAG Prompt Injection: Payloads and Defenses
A documentation-based walkthrough of four indirect prompt injection payloads for a Llama 3.1 RAG architecture and the published defenses that limit them.
-
How Prompt Injection Attacks Work: A Working Taxonomy
Prompt injection covers five classes: direct, indirect, multi-modal, agentic, and multi-turn, each with its own trust boundary and its own working defense.