prompt injection

SiYuan fixes prompt-injection path to SSH keys and cloud credentials

CVE-2026-82233 shows how an AI agent’s ordinary upload tool can turn hidden instructions and an approved tool call into sensitive local-file exposure.

CVE-2026-82233 let SiYuan’s AI agent copy sensitive local files through MCP, showing why tool approvals need action-level policy.

Read article

A malicious repository could turn Amazon Kiro into a data-exfiltration path

A Kiro prompt-injection flaw shows how repository content can steer an AI coding agent towards sensitive files, configuration changes and data exfiltration.

Read article

Designing the AI security boundary

Controls for prompts, data, outputs and tools.

A practical framework for securing LLM applications at the boundary between trusted instructions, untrusted content, model output, and real-world actions.

Read guide

How LLM jailbreaks bend the rules

Techniques, risks and practical defences.

How attackers bypass LLM safety guardrails, the common techniques they use, and practical ways to defend AI applications.

Read guide

15 prompt injection examples

Recurring attack patterns and practical defences.

Review 15 illustrative prompt injection attack examples across direct, indirect and agent risks, with source-backed controls for reducing their impact.

Read guide

What is prompt injection?

How it works and how to reduce the risk.

Learn how prompt injection attacks work, see practical examples, and compare controls for protecting LLM applications in this 2026 guide.

Read guide