#sydney

Anatomy of a Real Prompt Injection: The Bing Chat / Sydney Case

In early 2023, Bing Chat became the first widely-publicized case of indirect prompt injection in a deployed commercial LLM. What happened, what the attack surface was, and what it revealed about production injection risk.