~/tag/prompt-injection

#prompt injection

6 articles tagged prompt injection

ATT&CK Finally Has a Name for Prompt Injection. Now Write the Detection.

MITRE ATT&CK v20 adds five AI techniques to the Enterprise matrix: Direct and Indirect Prompt Injection under Execution, AI-Enabled Exfiltration, AI Result Poisoning, and Impair Autonomous Defenses. Why the placement matters more than the count, what the direct versus indirect split means for your trust boundaries, how MITRE's exfiltration analytic actually works, and the detection gaps you should know about before your next coverage report.

Aamir LakhaniOct 19, 202612 min read

Adversarial AI

Meta's Muse Wonder Has Your Calendar. Who Holds the Guardrails?

Meta's Muse Wonder and Muse Wonder Full are real frontier models built for personal agents. What Meta shipped, how to read its benchmark and safety charts, what independent tests and six launch-week videos found, what r/MetaAI users are saying, and why the security that matters lives in the Muse product, not in the model developers get through the API.

Aamir LakhaniOct 16, 202618 min read

Adversarial AI Offensive Security

How Attackers Attack AI

The serious attack surface is no longer the chatbot. It is the agent's toolbelt: retrieval, memory, skills, CI pipelines, credentials, and every renderer or proxy trusted to move data. A field analysis of EchoLeak, malicious agent skills, coding-agent compromise, state-scale campaigns, and data poisoning, separating confirmed incidents from research demonstrations, with the containment architecture that actually holds up.

Aamir LakhaniOct 3, 202619 min read

Adversarial AI Security

Who Should Run Your Digital Life? Muse, Amazon Quick, Hermes Agent and OpenClaw Compared

Muse, Amazon Quick, Hermes Agent and OpenClaw all promise to do more than chat. That is roughly where the similarities end. A practical comparison of four very different bets (hosted convenience, governed workplace AI, a self-improving runtime, and a local-first gateway), plus a security lens on each: where the lethal trifecta lives, and how to harden the two you run yourself.

Aamir LakhaniOct 3, 202615 min read

Adversarial AI Security

Black Hat 2026: The Agents Built Their Own Message Board

Black Hat and DEF CON land in the same week in Las Vegas every year, and every year one story ends up getting told in the hallways more than the others. Usually it takes a couple of days to sort out which story won. This year, it took about a morning.

Aamir LakhaniAug 12, 202616 min read

Adversarial AI Offensive Security

The State of AI Automation: Zapier vs Make vs n8n, Through a Red Team Lens

AI automation quietly became critical infrastructure that security never signed off on. A deep look at where automation actually is in 2026, the real differences between Zapier, Make, and n8n, when to reach for each, and why every one of them is a beautiful new attack surface: standing credentials, unauthenticated webhooks, shadow automation, and prompt injection into agents that hold tools.

Aamir LakhaniJul 28, 202615 min read