Simon Willison’s Weblog

18th August 2023 - Link Blog

Compromising LLMs: The Advent of AI Malware. The big Black Hat 2023 Prompt Injection talk, by Kai Greshake and team. The linked Whitepaper, Not what you’ve signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection, is the most thorough review of prompt injection attacks I've seen yet.

Posted 18th August 2023 at 2:46 am

Recent articles

Generating running routes with GPT-6 Astra and ChatGPT Work - 12th September 2026
OpenAI agents attacked RubyGems back in May - 12th September 2026
Some thoughts on the Navier–Stokes Millennium Prize Problem - 8th September 2026

This is a link post by Simon Willison, posted on 18th August 2023.

security 634 ai 2,235 prompt-injection 162 llms 1,947

Monthly briefing

Sponsor me for $10/month and get a curated email digest of the month's most important LLM developments.

Pay me to send you less!

Sponsor & subscribe