[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:mitre-atlas\u002Faml-t0051":3},{"item":4,"lessons":16,"controls":66,"related":95},{"family":5,"item":6,"code":7,"title":8,"citations":9,"publisher":10,"summary_md":11,"official_text":12,"official_attribution":12,"official_url":13,"link_label":14,"note":12,"updated_at":15},"mitre-atlas","aml-t0051","AML.T0051","LLM Prompt Injection",19,"MITRE","**What attackers do.** This is a technique from MITRE ATLAS, the companion knowledge base for attacks on AI systems. Attackers craft input that causes a large language model to ignore its instructions or act on the attacker's instructions instead. The input can be typed directly or hidden in content the model reads, such as documents, web pages or emails, which is known as indirect prompt injection.\n\n**How to defend.** Treat model output as untrusted, limit the tools and data an AI assistant can reach, and require human approval for sensitive actions. Separate trusted instructions from external content, filter inputs and outputs, and log prompts, retrieved content and tool calls for review. Test applications with adversarial prompts before release.\n\n**Signs to look for.** Look for responses that reveal system instructions, unexpected tool calls or data access, and hidden instructions in retrieved content. A common gap is not logging what the model read, which makes indirect injection hard to trace.",null,"https:\u002F\u002Fatlas.mitre.org\u002F","Open MITRE ATLAS","2026-10-18T15:18:43.663+00:00",{"total":9,"list":17},[18,22,26,30,34,38,42,46,50,54,58,62],{"slug":19,"title":20,"published_at":21},"ai-agents-are-the-new-bec-target-social-engineering-evolves","AI Agents Are the New BEC Target: Social Engineering Evolves","2026-10-09T14:20:26.055+00:00",{"slug":23,"title":24,"published_at":25},"prompt-injection-flaw-exposes-billion-dollar-ai-agent-manus","Prompt Injection Flaw Exposes Billion-Dollar AI Agent 'Manus'","2026-09-24T19:21:24.496+00:00",{"slug":27,"title":28,"published_at":29},"hidden-prompt-injections-can-hijack-ai-agents","Hidden Prompt Injections Can Hijack AI Agents","2026-09-08T18:20:59.502+00:00",{"slug":31,"title":32,"published_at":33},"ai-model-rules-are-not-a-substitute-for-real-security-controls","AI Model Rules Are Not a Substitute for Real Security Controls","2026-08-31T18:20:22.109+00:00",{"slug":35,"title":36,"published_at":37},"cryptographic-context-injection-bypasses-groks-safeguards-to-steal-user-data","Cryptographic Context Injection Bypasses Grok's Safeguards to Steal User Data","2026-08-20T18:21:31.953+00:00",{"slug":39,"title":40,"published_at":41},"cosnitch-ai-copilot-manipulated-into-leaking-its-own-architecture","CoSnitch: AI Copilot Manipulated into Leaking Its Own Architecture","2026-08-18T22:20:38.297+00:00",{"slug":43,"title":44,"published_at":45},"poisoned-logs-hijack-ai-agents-in-ghostjacking-attack","Poisoned Logs Hijack AI Agents in 'Ghostjacking' Attack","2026-08-10T14:20:19.522+00:00",{"slug":47,"title":48,"published_at":49},"atlassian-rovo-ai-vulnerable-to-prompt-injection-attacks-leaking-jira-and-confluence-data","Atlassian Rovo AI Vulnerable to Prompt Injection Attacks Leaking Jira and Confluence Data","2026-08-08T10:20:21.197+00:00",{"slug":51,"title":52,"published_at":53},"ai-agents-escaped-containment-and-hacked-hugging-face-undetected","AI Agents Escaped Containment and Hacked Hugging Face Undetected","2026-08-06T02:20:25.741+00:00",{"slug":55,"title":56,"published_at":57},"weaponized-ai-agent-used-by-chinese-threat-actor-to-target-security-firms","Weaponized AI Agent Used by Chinese Threat Actor to Target Security Firms","2026-08-03T18:21:32.758+00:00",{"slug":59,"title":60,"published_at":61},"microsoft-expands-ai-powered-security-to-defend-against-emerging-ai-threats","Microsoft Expands AI-Powered Security to Defend Against Emerging AI Threats","2026-07-30T18:21:29.623+00:00",{"slug":63,"title":64,"published_at":65},"hidden-prompts-in-word-docs-manipulate-microsoft-copilot-output","Hidden Prompts in Word Docs Manipulate Microsoft Copilot Output","2026-07-30T14:21:02.331+00:00",[67,72,77,81,86,90],{"slug":68,"name":69,"problem":70,"stories":71},"ai-security","AI application security","Prompt injection, data leaks through AI tools and unapproved AI use get caught.",18,{"slug":73,"name":74,"problem":75,"stories":76},"data-loss-prevention","Data loss prevention (DLP)","Sensitive data cannot quietly leave by email, upload, USB stick or AI tool.",6,{"slug":78,"name":79,"problem":80,"stories":76},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",{"slug":82,"name":83,"problem":84,"stories":85},"identity-threat-detection","Identity threat detection and response (ITDR)","Attackers who log in with real, stolen credentials get noticed.",3,{"slug":87,"name":88,"problem":89,"stories":85},"security-awareness-training","Security awareness training and phishing simulation","People recognise and report attacks instead of falling for them.",{"slug":91,"name":92,"problem":93,"stories":94},"security-monitoring-siem","Security monitoring (SIEM)","Logs from everywhere end up in one place, with alerts that someone actually sees.",2,[96,101,107,112,117,121,126,131],{"family":97,"item":98,"code":99,"title":100,"together":9},"nist-ai-rmf","overview","AI RMF 1.0","AI Risk Management Framework (AI RMF 1.0)",{"family":102,"item":103,"code":104,"title":105,"together":106},"nist-800-53","si-10","SI-10","Information Input Validation",15,{"family":108,"item":108,"code":109,"title":110,"together":111},"owasp","OWASP","OWASP (Open Worldwide Application Security Project)",13,{"family":113,"item":114,"code":115,"title":116,"together":111},"cis","3","Control 3","Data Protection",{"family":113,"item":118,"code":119,"title":120,"together":111},"8","Control 8","Audit Log Management",{"family":102,"item":122,"code":123,"title":124,"together":125},"au-12","AU-12","Audit Record Generation",10,{"family":102,"item":127,"code":128,"title":129,"together":130},"ac-6","AC-6","Least Privilege",9,{"family":113,"item":132,"code":133,"title":134,"together":135},"16","Control 16","Application Software Security",8]