Research by: Alexey Bukhteyev Key Takeaways OpenAI recently introduced Lockdown Mode, an optional advanced security setting designed to protect sensitive user data from prompt injection-based…
arXiv:2611.04672v1 Announce Type: new Abstract: Prompt injection is usually discussed and evaluated as a single, homogeneous type of attack. However, vulnerabilities reported in real-world systems…
arXiv:2611.04673v1 Announce Type: new Abstract: Indirect Prompt Injection (IPI) poses a critical threat to LLM agents. Existing defenses largely focus on whether an injection induces a new tool…
CrowdStrike announced Monday it has signed agreements to acquire two artificial intelligence security companies, Fiddler AI and Dreadnode, in deals announced at its Fal.Con Europe conference in…
Key Points Check Point Research analyzed the Haiou jailbreak bundle, a prompt package targeting OpenAI Codex. Such jailbreaks are designed to weaken model guardrails and enable tasks related to…
arXiv:2611.00725v1 Announce Type: new Abstract: Coding agents increasingly operate with web access and high privileges, creating a new attack surface where web fraud can directly target autonomous…
arXiv:2611.00729v1 Announce Type: new Abstract: Language-model agents commonly collapse two decisions that security systems separate: selecting an action and determining whether that action is…
arXiv:2610.40744v1 Announce Type: new Abstract: With the progressive capabilities of large language models (LLMs), researchers are finding ways to integrate them into the control loops of Open Radio…
arXiv:2610.41181v1 Announce Type: new Abstract: LLM-powered browser agents are transforming web automation by autonomously interacting with websites and executing complex workflows. However, the…
arXiv:2610.41307v1 Announce Type: new Abstract: Multimodal indirect prompt injection embeds malicious instructions in external media that also contains information needed for the user's task…
What Happens Next: Turn Cloud Security Assessment Findings Into Action October 28, 2026 Adrian Pascual BLOG 5 min. Cloud security assessments are good at finding problems. Once the assessment is over?
arXiv:2610.36108v1 Announce Type: new Abstract: LLM agents increasingly access external tools through the Model Context Protocol (MCP), but the natural-language metadata used to describe those tools…
Madhu Shashanka, Chief Scientist at Concentric AI, explains why securing LLM tools and agents depends more on your data than on the model. Controls on model behavior, such as guardrails and injection…
A new AI agent prompt injection technique exploits how coding assistants consume local instruction files, blurring the line between text documents and executable actions.
arXiv:2610.31974v1 Announce Type: new Abstract: Agentic AI systems using the Model Context Protocol (MCP) are vulnerable to indirect prompt injection through untrusted tool outputs. We demonstrate…
arXiv:2610.32531v1 Announce Type: new Abstract: Prompt injection benchmarks assess whether large language models (LLMs) and agents resist malicious instructions embedded in external content. However…
arXiv:2610.30193v1 Announce Type: new Abstract: Retrieval-augmented generation (RAG) systems face security, privacy, and copyright risks including content leakage, source reconstruction, unauthorized…
arXiv:2610.30202v1 Announce Type: new Abstract: With the rapid integration of Multi-modal Large Language Models (MLLMs) into real-world applications, Prompt Injection (PI) has emerged as a critical…
arXiv:2610.28810v1 Announce Type: new Abstract: The widespread adoption of generative artificial intelligence in recent years has brought a parallel rise in prompt injection and jailbreak attacks. By…
arXiv:2610.29379v1 Announce Type: new Abstract: LLM-based vulnerability discovery harnesses can miss real, reachable vulnerabilities because of how the harness around the model is built. Steps that…