this post was submitted on 17 Feb 2026
27 points (100.0% liked)

Cybersecurity

9584 readers
45 users here now

c/cybersecurity is a community centered on the cybersecurity and information security profession. You can come here to discuss news, post something interesting, or just chat with others.

THE RULES

Instance Rules

Community Rules

If you ask someone to hack your "friends" socials you're just going to get banned so don't do that.

Learn about hacking

Hack the Box

Try Hack Me

Pico Capture the flag

Other security-related communities !databreaches@lemmy.zip !netsec@lemmy.world !securitynews@infosec.pub !cybersecurity@infosec.pub !pulse_of_truth@infosec.pub

Notable mention to !cybersecuritymemes@lemmy.world

founded 2 years ago
MODERATORS
top 4 comments
sorted by: hot top controversial new old
[–] instantregret@lemmy.world 14 points 2 days ago

It's an indirect prompt injection, no need to make up a new word for it.

[–] Australis13@fedia.io 11 points 2 days ago (2 children)

Seriously? This is a painfully obvious prompt injection vulnerability (reminds me of SQL injection, actually). If you're offering a "summarise with AI" functionality, then you should be sanitising the inputs properly. It should be a simple call to the API to tell it to summarise a dataset or particular webpage -- not provide a query string.

[–] Jesus_666@lemmy.world 5 points 2 days ago

But hat would require them to put in actual effort instead of just pushing out a minimum viable product and calling it the next evolutionary stage of computing.

[–] redsand@infosec.pub 3 points 2 days ago

Best we can offer is another AI doing sanitation