#prompt-injection
POSTS
- The handoff summary is the attack surface
The detail that got me isn't a sandbox escape. It's the summary. A model asked to carry context into a fresh chat wrote its own…
- The Off Switch That Wasn't
The detail I keep chewing on isn't the exfiltration itself — it's that the org-wide "Enable web search" toggle was off and the attack…