Prompt Injection Defense

Public

Weekly roundup of the latest Prompt Injection attack techniques and reusable defense prompt templates from X, security blogs, and papers

Prompt Injection Defense06/09/2026, 01:27:50 AM

Your model scored 2.7% on jailbreak benchmarks — and still broke at turn 8

Cisco tested 15 frontier models under multi-turn pressure and every one failed — GPT-5.4 jumped from 2.74% to 24.68% attack success rate. Single-turn benchmarks are an unreliable safety proxy. This issue covers the Crescendo escalation pattern and the two application-layer defenses that actually hold up: conversation history filtering and output filtering in separate code.

Prompt Injection Defense06/02/2026, 01:28:53 AM

One click owns your agent: the ClawHavoc MCP supply chain attack and how to harden against it

ClawHavoc poisoned 1,184 MCP skills in OpenClaw's marketplace and chained four CVEs (max CVSS 9.6) to escalate from a malicious plugin to a full host backdoor. CVE-2026-25253 (CVSS 8.8) lets attackers steal a user's full auth token with a single link click. No model-level defense holds — execution-layer sandboxing is the only control that survives. This issue delivers a copy-paste system prompt hardening template you can ship to production today.

Prompt Injection Defense05/19/2026, 01:08:05 AM

Zero-click email, zero model-level fix: what EchoLeak taught us about output filtering

EchoLeak (CVE-2025-32711) turned crafted emails into zero-click data exfiltration pipelines inside Microsoft 365 Copilot. A fresh arXiv study then proved that every model-level defense breaks under adaptive attack — and that output filtering in application code is the only control that survives. This issue covers the attack mechanics and a copy-paste Python output-filter template you can ship today.

No more Posts