Thema

#prompt-injection

Loots, Blogposts und verwandte Themen rund um diesen Tag. Folge dem Tag, damit passende Updates in deinem Orbit bleiben.

#prompt-injection
1Gezeigte Loots
5Gezeigte Artikel
8Verlinkte Nachbar-Tags
Anschluss-Themen

Wenn du tiefer einsteigen willst, helfen die benachbarten Tags beim Vergleichen und Querlesen.

#AI agents#AI security#codeql#github#agentic workflows#application security#benchmarks#computer use
Loot

Mehr aus diesem Thema

Alle Loots entdecken
Scan AI Apps for System Prompt Injection with CodeQL 2.26.0 1

Scan AI Apps for System Prompt Injection with CodeQL 2.26.0

0
#codeql#github+4
GitHub's CodeQL 2.26.0 adds a JavaScript/TypeScript query that detects untrusted user values flowing into AI system prompts. CodeQL 2.26.0 is useful for teams shipping AI features in JavaScript or TypeScript. The release adds js/system-prompt-injection, a query for cases where untrusted user-provided values flow into an AI model's system prompt and can manipulate model behavior.\n\nWhy bookmark it: GitHub says every new CodeQL version is automatically deployed to GitHub code scanning users on github.com, so many teams can get the new query through existing security workflows instead of adding a separate scanner. The release also adds prompt-injection sinks for OpenAI, Anthropic, and Google GenAI SDK APIs, plus Kotlin 2.4.0 support and several query accuracy improvements.\n\nUse it for: AI app pull requests, agent backends, prompt-template libraries, Realtime session setup, and GenAI SDK integrations where user content might cross into system-level instructions.\n\nCheck before relying on it: whether your repo uses GitHub code scanning on github.com or a GitHub Enterprise Server version that includes CodeQL 2.26.0, whether the affected language pack runs in your workflow, and whether custom prompt-building helpers need extra modeling.
Free
Review open
0
Open loot
Blog

Verwandte Artikel

Blog durchsuchen
AI & Automation

OpenAI uses GPT-Red to harden GPT-5.6 against prompt injection

OpenAI has detailed GPT-Red, an internal automated red-teaming model used to generate prompt-injection attacks and train GPT-5.6 Sol to resi…

Tools & Apps

Scan AI App Code for System Prompt Injection with CodeQL 2.26.0

GitHub's CodeQL 2.26.0 adds a JavaScript and TypeScript query for system prompt injection, giving teams a static-analysis check for AI app c…

AI & Automation

Use Gemini 3.5 Flash computer use only after sandbox checks

Google made computer use a built-in Gemini 3.5 Flash tool for browser, mobile, and desktop agents, but teams still need sandboxing, confirma…

AI & Automation

Deep-XPIA tests prompt injection across multi-agent handoffs

Deep-XPIA is an open-source benchmark for cross-prompt injection in multi-agent systems, with live Claude Haiku measurements, a confused-dep…

Wissen & Lernen

Agentic Workflow Injection: What GitHub Actions Teams Should Audit Now

A new arXiv study names Agentic Workflow Injection as a GitHub Actions risk where issue, pull request, or comment text can steer AI-assisted…