#prompt-injection

Emergence AI ran eight worlds of ten agents for up to 21 days, then staged three attacks. No world passed all three. The scores, and three fixes for builders.

We checked 19 widely deployed MCP servers for documented instruction surfaces beyond tool descriptions. Only one discloses one. Undocumented is the finding.

CVE-2026-75130 scores 9.0 under CVSS 3.1 and 6.4 under CVSS 4.0. Context7 2.1.2 and earlier are affected; no public fix documented as of Aug 22, 2026.

A five-day plan to red-team AI agents with garak, promptfoo and PyRIT, mapped to the OWASP agentic categories and the MITRE ATLAS technique taxonomy.

A single fake Sentry error hijacks Claude Code, Cursor, and Codex at ~85% success via MCP — no breach needed. The attack explained, plus five defenses.

OpenAI's Lockdown Mode severs the exfiltration stage of prompt injection, not injection entry. What it disables, who needs it, and how to deploy it RBAC-style.

A reference architecture for layering input, output, and tool-call guardrails on production LLM systems: prompt-injection, PII, and jailbreak defense.

H1 2026 AI incident retrospective — 50+ reported incidents analysed across hallucination, tool misuse, prompt injection, data leakage, and bias.

Audit MCP servers across 75 security points — auth, secrets handling, tool scoping, audit logs, prompt-injection defense, and abuse-path coverage.

Prompt injection attack taxonomy for production agents — 10 attack classes, delivery vectors, detection signals, and mitigation matrix for 2026 deployments.

OpenAI launches dedicated safety bug bounty for AI agent vulnerabilities. Covers prompt injection, data exfiltration, and autonomous action risks.

OpenClaw's full system access creates significant attack surface. Complete security hardening guide with prompt injection defense and containerization.

Secure AI agents with enterprise best practices. 24 CVEs across top tools. Prompt injection, data exfiltration prevention. Complete guide.