/tags/adversarial-ai/ Recent content in Adversarial-Ai on Napat's Inverse Blog Hugo en-us Mon, 30 Mar 2026 10:05:00 +0700 /2026-03-30-the-agent-security-gap/ Mon, 30 Mar 2026 10:05:00 +0700 /2026-03-30-the-agent-security-gap/ <h2 id="why-adversarial-prompt-engineering-is-not-the-problem--and-what-actually-is">Why adversarial prompt engineering is not the problem — and what actually is</h2> <p>In early 2023, a group of researchers demonstrated something that made security people uncomfortable and product people dismissive.</p> <p>They showed that a language model could be instructed to do things its creators never intended, not by the person using it, but by content it was asked to process.</p> <p>The paper was called &ldquo;Not what you&rsquo;ve signed up for.&rdquo; The attack was called indirect prompt injection.</p> <p>Three years later, the industry still has not fully absorbed the lesson.</p> <hr> <h2 id="the-fixation-on-prompt-injection">The fixation on prompt injection</h2> <p>If you follow AI security discourse, you would think prompt injection is the central problem. It dominates conference talks. It tops the OWASP list. It generates endless proof-of-concept videos.</p> <p>And it should get attention. It is a real vulnerability.</p> <p>But the fixation on prompt injection obscures a more important truth: prompt injection is a symptom, not the disease.</p>