https://ashwinviswamithiran.com/tags/prompt-injection/Recent content in Prompt-Injection on Ashwin Viswamithiranhttps://ashwinviswamithiran.com/og-default.pnghttps://ashwinviswamithiran.com/og-default.pngHugoen-usTue, 29 Sep 2026 00:00:00 +0000https://ashwinviswamithiran.com/writing/attacks-that-worked/Mon, 28 Sep 2026 00:00:00 +0000https://ashwinviswamithiran.com/writing/attacks-that-worked/A technique survey of 18,479 successful prompt attacks where the correct MITRE ATLAS label is known in advance from how the competition was scored. Keyword attribution recovers 11.4% of it, and most of the remaining breakdown describes the challenges rather than the attackers.https://ashwinviswamithiran.com/writing/promptlsh-evaluation/Tue, 08 Sep 2026 00:00:00 +0000https://ashwinviswamithiran.com/writing/promptlsh-evaluation/Two organisations cannot compare prompt attacks by sharing the prompts: those are things users wrote. A compact derived fingerprint solves that, and this measures what each size actually buys — full float, 384-byte quantised, 32-byte digest, dependency-free lexical — on recall, on evasion resistance, and on what survives across independently collected feeds.https://ashwinviswamithiran.com/writing/weve-seen-this-movie-before/Mon, 24 Aug 2026 00:00:00 +0000https://ashwinviswamithiran.com/writing/weve-seen-this-movie-before/Prompt attacks are new. The tooling being built around them is not. It's the same ladder malware defence climbed over twenty-five years, being climbed again in a handful.