Attributed metadata history
Up to 100 retained publisher events per page for 29d6aea32eef6b49220ee183c812e932397a13b3d0e6f0446d8c8372b616274f. Withdrawals and unavailable references remain attributed to their publishers.
intelligence_src_c25d91fa3ad9ae9ac7
observed · 2026-10-12 14:53:03 UTC
This post describes how I found a Prompt Injection attack angle in Bing Chat that allowed malicious text on a webpage (like a user comment or an advertisement) to exfiltrate data. The Vulnerability - Image Markdown Injection When Bing Chat returns text it can return markdown elements, which the client will render as HTML. This includes the feature to include images. Imagine the LLM returns the following text:  This will be rendered as an HTML image tag with a src attribute pointing to the attacker server.
Fingerprint: e4e449252393853b33c74ad74b1a085786e19f62a5741a4f61c30465635e59fd
intelligence_src_c25d91fa3ad9ae9ac7
observed · 2026-10-12 14:53:03 UTC
available
Fingerprint: 0a2f1bebc7ea800736eafab237a0ddecfb8797a02d23951e8aa80935e2f3446f