Indirect Prompt Injection (IPI) has become the top LLM vulnerability in 2026, with over 1.2 million public web pages infected and a 32% growth rate. Attackers embed hidden instructions in content that…
AI model security requires protecting machine learning models from vulnerabilities including prompt injection, model extraction, and supply chain risks, with early decisions and frameworks like NIST's…
Prompt injection in AI agents cannot be prevented with better system prompts, only with architectural controls. MailKite's inbox agent is designed assuming compromise, using ACLs, domain ownership ver…
A developer built a scanner that fires prompt-injection probes at a self-hosted AI agent and tested it across five model backends, finding leak rates ranging from 0% to 90% depending solely on the mod…
Microsoft patched a critical vulnerability in M365 Copilot, tracked as CVE-2025-32711 and dubbed EchoLeak, that allowed attackers to steal sensitive data including 2FA codes via a single malicious ema…
ContextWall launched a context-layer firewall that intercepts and screens content before it reaches an AI agent's context window, blocking prompt injection and credential leaks. The product addresses …