7 min read
Prompt injection: the attack that needs no click
Language models do not separate instructions from content, so any text the model reads can behave like a command. What EchoLeak showed, why retrieval makes it worse, and why running the model locally does not fix it.
Read the article