Tag
#indirect-injection
3 posts tagged indirect-injection.
- Standards & Frameworks
OWASP LLM Top 10 Prompt Injection (LLM01:2025): What AppSec Teams Need to Know
LLM01 in the OWASP LLM Top 10 is prompt injection — and it held the top spot in both the 2023 and 2025 editions.
- Attack Techniques
How Prompt Injection Attacks Work: Direct, Indirect, and Agent Hijacking
A technical breakdown of how prompt injection attacks work — from direct goal hijacking to indirect RAG poisoning and agentic pipeline compromise.
- offensive
Invisible Prompt Injection: The Unicode Tag Smuggling Technique
Unicode Tag characters let attackers embed invisible prompt injection payloads that still tokenize as instructions. How it works and what stops it.