Prompt injection ranks No. 1 with OWASP and No. 12 in the incident record. The attack itself is invisible to a scan.
Prompt injection is OWASP's No. 1 LLM risk, but ranks No. 12 in 6,639 real incidents — an independent analysis finds no statistically detectable agreement.