Prompt Injection

In depth

An attack where malicious input tricks an AI model into ignoring its instructions and following attacker-supplied commands instead. Direct injection embeds instructions in user input. Indirect injection hides instructions in external data the model reads (web pages, documents, emails). Prompt injection is the most significant security risk in AI applications. Defenses include input sanitization, output filtering, privilege separation, and guardrail layers.