Tag: 提示注入 (7 articles)

A new prompt injection variant hides malicious instructions in Word documents, enabling self-replication and spread via Microsoft Copilot—essentially creating an AI worm.

A researcher found a loophole in Claude's web_fetch tool that allowed attackers to exfiltrate private data letter by letter via a honeypot site, highlighting new challenges in AI智能体 security.

A public AI security challenge saw 2,000 people attempt to leak secrets via prompt injection, with all 6,000 attempts failing, reflecting progress in frontier model defenses but also revealing lingering risks.

Lockdown Mode uses deterministic rules to block outbound requests, cutting off the data exfiltration vector in prompt injection attacks and implicitly revealing the weakness of default ChatGPT security.

A real-world attack where hackers bypassed Instagram's account recovery by simply asking Meta's AI chatbot to link a new email, revealing the severe risks of wiring AI directly into critical systems without proper authorization boundaries.

A critical security flaw in Microsoft Copilot Cowork allowed attackers to exfiltrate user files via prompt injection by exploiting auto-sent emails and pre-authenticated download links.

Research reveals that major LLMs reuse encryption keys for reasoning blocks across models, allowing attackers to recover hidden reasoning via weaker model jailbreaks and exposing new prompt injection risks.