Decrypt

OpenAI Uses AI Red Team to Strengthen GPT-5.6 Against Prompt Injection Attacks

OpenAI introduced GPT-Red, an automated AI system designed to find vulnerabilities in GPT models before release. The company said GPT-Red was used to train GPT-5.6, reducing failures on one of its ...
MIT Technology Review

Meet GPT-Red: an LLM super-hacker OpenAI built to make its models safer

OpenAI has built an LLM super-hacker called GPT-Red that it uses as a sparring partner to help its other models boost their ...
Tech Times on MSN

Prompt injection flipped: Defender plants text that stops AI attackers

Context bomb cybersecurity research from Tracebit shows that a single hidden text string inside an AWS cloud decoy stopped ...
InfoQ

Facilitating the Spread of Knowledge and Innovation in Professional Software Development

AI makes the first 80% of development feel fast, but hides architectural complexity until it's too late. To prevent system ...

Now, defenders are embracing the prompt injection, too

Prompt injections, the malicious commands attackers embed into content to entice LLMs to follow them, have been attackers’ go ...
Infosecurity-magazine.com

Indirect Prompt Injection in Web Content Targets AI Agents

Attackers have begun embedding hidden instructions in websites to target AI agents, according to new research. Zscaler's ThreatLabz documented two real-world campaigns which used a technique called ...
Ars Technica

Fed up with vibe coders, dev sneaks data-nuking prompt injection into their code

The controversy over vibe coding reached a new high this week after a developer added hidden instructions to his open source Java testing app to sabotage projects performed by AI coding agents. The ...
Bleeping Computer

Ghost CMS SQL injection flaw exploited in large-scale ClickFix campaign

A large-scale campaign is exploiting a critical SQL injection vulnerability (CVE-2026-26980) in Ghost CMS to inject malicious JavaScript code that triggers ClickFix attack flows. The campaign was ...
The Hacker News

Drupal Core SQL Injection Bug Actively Exploited, Added to CISA KEV

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a recently patched critical security flaw impacting Drupal Core to its Known Exploited Vulnerabilities (KEV) catalog, based ...
Bleeping Computer

Drupal: Critical SQL injection flaw now targeted in attacks

Drupal is warning that hackers are attempting to exploit a "highly critical" SQL injection vulnerability announced earlier this week. The content management system (CMS) project published a PSA on May ...
Time

‘Learning Recession’: Why Student Test Scores Have Seen a Decade-Long Decline Across the U.S.

Follow this section to personalize your feed and get instant alerts. WHY FOLLOW? Update your preferences in Account Settings Personalized Content Follow this tag to personalize your feed and get ...
Town & Country

Have the Culture Wars Come for Standardized Tests? Meet the New Conservative SAT

Starting this upcoming college admissions cycle, students applying to service academies such as West Point and the U.S. Naval Academy will be able to take a standardized test other than the SAT or ACT ...