Prompt Injection 2.0: Hybrid AI Threats
Jul 2025 paper showing how prompt injections now combine with XSS, CSRF, AI worm propagation, and multi-agent infections to evade traditional WAFs entirely. Evaluates Preamble's classifier, data-tagging, and RL-based defenses against these hybrid scenarios.
- from
- Prompt Injection
- added
- 2026-10-10
- likes
- 0
similar
-
Indirect Prompt Injection Attacks: Hidden AI Risks crowdstrike.com
CrowdStrike's Dec 2025 analysis of IPI TTPs targeting enterprise GenAI, including attacker-controlled document poisoning, RAG context manipulation, and practical detection signals for SOC workflows.
-
Prompt injection: What's the worst that can happen? simonwillison.net
General overview of Prompt Injection attacks, part of a series.
-
New Prompt Injection Papers: Agents Rule of Two and The Attacker Moves Second simonwillison.net
Simon Willison's Nov 2025 commentary on both landmark papers, including the finding that 12 published defenses were bypassed at >90% success rate using gradient descent and RL-based adaptive attacks.
-
The Landscape of Prompt Injection Threats in LLM Agents (SoK) arxiv.org
Feb 2026 systematization-of-knowledge paper with a unified taxonomy covering attack payload strategies (heuristic vs. optimisation-based) and defense intervention stages (text, model, execution). Introduces the AgentPI benchmark for context-dependent agent tasks that all prior…
-
MCP Prompt Injection: How AI Gets Hacked youtube.com
Nov 2025 hands-on walkthrough showing how prompt injection exploits tool metadata and trust boundaries in Model Context Protocol-integrated agents, which remain a primary attack surface as MCP adoption widens.
-
Prompt injection explained simonwillison.net
Video, slides, and a transcript of an introduction to prompt injection and why it's important.
Prompt Injection › Research Papers: “Jul 2025 paper showing how prompt injections now combine with XSS, CSRF, AI worm propagation, and multi-agent infections to evade traditional WAFs entirely. Evaluates Preamble's classifier, data-tagging, and RL-based defenses against these hybrid scenarios.”