prompt injection news
8 stories
Researcher shows how Claude Code can be tricked simply by asking it to summarize a website
A security researcher has demonstrated a method to trick Anthropic's Claude Code, specifically the Opus 5 model running in Auto Mode, into executing arbitrary code by simply asking it to summarize a malicious website. The attack, detailed by Johann Rehberger, also known as wunderwuzzi, reportedly has a success rate of up to 80 percent.
Zero-Click Grok Chat History Theft: Adversa AI Demonstrates Cryptographic Context Injection
A new attack technique, dubbed Cryptographic Context Injection, has been demonstrated to bypass artificial intelligence (AI) safety filters, potentially leading to the theft of user chat histories and other sensitive data. The technique, developed by Adversa AI researcher Rony Utevsky, involves embedding malicious instructions within AES-encrypted ciphertext and tricking AI models into…
Atlassian Rovo Can Be Tricked Into Sending Jira and Confluence Data to Attackers
Reports indicate that Atlassian's Rovo assistant has been found to contain vulnerabilities that could be exploited to exfiltrate sensitive data from Jira and Confluence instances. Two separate security firms have identified distinct mechanisms by which an attacker might trick Rovo into disclosing information. These findings highlight potential security risks associated with AI-powered…
Prompt Injection Attacks Disrupt AI Hacking Agents
Researchers at Tracebit have developed a new defensive technique, dubbed "context bombing," that utilizes prompt injection attacks to disrupt malicious AI hacking agents. This method involves embedding specific, forbidden commands alongside sensitive data within a target environment, causing attacking large language models (LLMs) to shut down before they can inflict harm.
CrowdStrike Uncovers New Prompt Injection Techniques
CrowdStrike's AI security research team has announced the addition of 18 new prompt injection techniques to its industry-leading taxonomy, bringing the total to over 200 distinct methods. Prompt injection remains a significant challenge in the AI era, particularly as AI agents gain more capabilities to interact with external data and systems.
What’s new in Microsoft Security: June 2026
Microsoft is introducing new security measures, with a significant emphasis on artificial intelligence and the protection of AI agents. The company is developing an AI-driven system codenamed 'MDASH' designed to identify and address intricate software vulnerabilities across various computing environments.
AI threats in the wild: The current state of prompt injections on the web
Google's Threat Intelligence teams have been actively monitoring the web for real-world instances of indirect prompt injection (IPI), a significant threat vector targeting AI agents. IPI occurs when an AI system processes external content, such as websites or documents, containing malicious instructions that override the user's original intent. While the potential for IPI is widely discussed,…
Google Workspace’s continuous approach to mitigating indirect prompt injections
Google is detailing its ongoing efforts to combat indirect prompt injection attacks targeting its artificial intelligence features within Google Workspace, such as Gemini. These attacks aim to manipulate AI behavior by embedding malicious instructions within the data or tools that the AI accesses, often without the user's direct knowledge or interaction.