Article

Prompt injections as far as the eye can see

Simon Willison · simonw.substack.com

Fresh real-world exploits showing this is not theoretical.

Open on simonw.substack.com ↗

The question it answers

  1. What can go wrong when an agent acts on my behalf, and how do I keep it safe?

Read with it

  1. The single most important security idea for anyone deploying agents. simonwillison.net Article The lethal trifecta for AI agents Simon Willison
  2. The same argument in shareable form for your team channel. simonw.substack.com Article The lethal trifecta (newsletter edition) Simon Willison
  3. The full running history of the attack class, from the person who named it. simonwillison.net Article Prompt injection series Simon Willison
  4. The foundational explainer that makes the attack click in 15 minutes. simonw.substack.com Video Prompt injection explained, with video, slides, and a transcript Simon Willison
  5. The industry-standard checklist, free and framework-agnostic. cheatsheetseries.owasp.org Guide AI Agent Security Cheat Sheet OWASP
  6. Translates the OWASP list into concrete actions for small teams. goteleport.com Article OWASP Top 10 for Agentic Applications: Key Takeaways Teleport
eChai Partner Brands The partnership →