S0:E18. Student stops AI supply chain attack and prompt injection is still a thing...
In this episode of Breach Please, we talk about the details that emerged about the Anthropic agent that tried to social engineer a college student into committing a supply chain attack. The whole thing feels very xz-utils 'esque, only with an agent - and a malfunctioning one at that.
Then we cover some interesting reporting by Dan Goodin showing how Grok's guardrails can be bypassed through passing it encrypted data along with the instructios to decrypt it. We reinforce that prompt injection is a feature of LLMs, not a bug.
We then talk about informed consent of the risks and applicable…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.