In cybersecurity, attackers and defenders are always trying to beat each other. The former seeks new ways that can circumvent the defense put in place by the latter. It might look like in the movies, but in reality, there are lives, money, and reputation at stake. At the end of the day, it's good news when the defenders come out on top.
Now, defenders are embracing the prompt injection, too
That awesome moment when you turn the weapon against the attackers and you feel so good about yourself; this is an example. For months, we have read how attackers use prompt injections to bypass LLMs guardrails. Now, defenders are using it to shut them down!
Here is how the defenders pulled it off:
Researchers from Tracebit on Monday said they found that placing prompt injections alongside passwords, cryptographic keys, and other secrets stored on Amazon Web Services was often all that was needed to shut down attacks from AI hacking agents.
