this post was submitted on 17 Feb 2026
35 points (100.0% liked)

Cybersecurity

9693 readers
5 users here now

c/cybersecurity is a community centered on the cybersecurity and information security profession. You can come here to discuss news, post something interesting, or just chat with others.

THE RULES

Instance Rules

Community Rules

If you ask someone to hack your "friends" socials you're just going to get banned so don't do that.

Learn about hacking

Hack the Box

Try Hack Me

Pico Capture the flag

Other security-related communities !databreaches@lemmy.zip !netsec@lemmy.world !securitynews@infosec.pub !cybersecurity@infosec.pub !pulse_of_truth@infosec.pub

Notable mention to !cybersecuritymemes@lemmy.world

founded 2 years ago
MODERATORS
top 4 comments
sorted by: hot top controversial new old
[–] instantregret@lemmy.world 16 points 3 weeks ago

It's an indirect prompt injection, no need to make up a new word for it.

[–] Australis13@fedia.io 11 points 3 weeks ago (2 children)

Seriously? This is a painfully obvious prompt injection vulnerability (reminds me of SQL injection, actually). If you're offering a "summarise with AI" functionality, then you should be sanitising the inputs properly. It should be a simple call to the API to tell it to summarise a dataset or particular webpage -- not provide a query string.

[–] Jesus_666@lemmy.world 7 points 3 weeks ago

But hat would require them to put in actual effort instead of just pushing out a minimum viable product and calling it the next evolutionary stage of computing.

[–] redsand@infosec.pub 3 points 3 weeks ago

Best we can offer is another AI doing sanitation