Australian Signals Directorate

Prompt injection is not a bug that a better model can patch. If an AI agent is tricked, the real question is what it can access, change or send before anyone notices.