Attributed metadata history
Up to 100 retained publisher events per page for e6fae4d264888e56a379f02e568cf8ba9a6f39d2ac47bcc74804bc998cbd2182. Withdrawals and unavailable references remain attributed to their publishers.
intelligence_src_c25d91fa3ad9ae9ac7
observed · 2026-10-12 14:53:04 UTC
At Black Hat Europe I did a fun presentation titled SpAIware and More: Advanced Prompt Injection Exploits. Without diving into the details of the entire talk, the key point I was making is that prompt injection can impact all aspects of the CIA security triad. However, there is one part that I want to highlight explicitly: A Command and Control system (C2) that uses prompt injection to remote control ChatGPT instances. Remote Controlling ChatGPT Instances! An adversary can compromise ChatGPT instances and have them join a central Command and Control system which provides updated instructions for all the remote controlled ChatGPT instances to follow over-time.
Fingerprint: 5480f6d1cbbdd17656fafe520dc816ebfe2b608f8e6e8367ce117c597ac3ea76
intelligence_src_c25d91fa3ad9ae9ac7
observed · 2026-10-12 14:53:03 UTC
available
Fingerprint: 0a2f1bebc7ea800736eafab237a0ddecfb8797a02d23951e8aa80935e2f3446f