… For example, PromptArmor demonstrated that the link preview feature in messaging apps like Telegram and Discord can be turned into a data exfiltration pathway through indirect prompt injection. …
… This was a gold mine for cyber threat actors leveraging prompt injection techniques , as they could quietly exfiltrate session tokens to remote servers. …
… Prompt injection isn't solved, and a well-engineered project is not the same as a well-configured deployment. …
… OpenAI disclosed that two of its employees' devices were caught in the same May 11 TanStack attack, that some credential material was exposed, and that signing keys for Windows, macOS, iOS, and Android were impacted, prompting it to re-sign its apps with new certificates. …
… Sending it all back to me, unprompted, is a spectacular way to break that trust. …