── TAG FILTER ──
#llm-security • 3 articles

Posts tagged #llm-security

═══ #LLM-SECURITY ═══
The Prompt Became a Taint Sink
GitHub CodeQL 2.26.0 added system prompt injection detection, pulling AI prompt security into ordinary static analysis and treating prompts like application inputs.
Browser Agents Read The Poisoned Page
Stanford's Real World AI Security conference put BrowseSafe on the program, and the paper shows why prompt injection in browser agents is a web-security problem with real actions attached.
The Agent Has Root
Sysdig captured an LLM-driven intrusion that moved from a vulnerable notebook server to an internal PostgreSQL dump in under an hour. The attacker did not need a better exploit. They needed a tireless operator.