Hynek Schlawack (@hynek.me)

"We simply don't know to defend against these attacks. We have zero agentic AI systems that are secure against these attacks.[…] It's an existential problem that, near as I can tell, most people developing these technologies are just pretending isn't there."

loading . . .

We Are Still Unable to Secure LLMs from Malicious Inputs - Schneier on Security Nice indirect prompt injection attack: Bargury’s attack starts with a poisoned document, which is shared to a potential victim’s Google Drive. (Bargury says a victim could have also uploaded a compromised file to their own account.) It looks like an official document on company meeting policies. But inside the document, Bargury hid a 300-word malicious prompt that contains instructions for ChatGPT. The prompt is written in white text in a size-one font, something that a human is unlikely to see but a machine will still read. In a proof of concept video of the attack... https://www.schneier.com/blog/archives/2025/08/we-are-still-unable-to-secure-llms-from-malicious-inputs.html