Prompt injection — Prompt injection is an attack in which hidden or malicious instructions are slipped into content an AI system reads, causing it to follow the attacker instead of its user. The instructions can hide in web pages, emails, or documents. It is especially dangerous for agents that browse and act. There is no complete fix yet, so layered defenses are used.

Added October 21, 2026