CrowdStrike's AI security research team has expanded its prompt injection taxonomy with 18 new techniques, bringing the total to over 200. Five techniques are detailed: Trigger-Activated Rule Addition (dormant instructions activated by triggers), Cognitive Token Suppression (blocking safety-related terms), Algorithmic Payload Decomposition (fragmenting payloads to evade filters), Special Token Injection (mimicking internal model delimiters), and Unwitting User Delivery (social engineering users into submitting malicious prompts). These techniques highlight that prompt injection has evolved beyond simple jailbreaks to include delayed activation, boundary spoofing, and composite attacks targeting AI agents with tool-access capabilities.
LLM abuse
1 post
CrowdStrike Uncovers New Prompt Injection Techniques