Tagged:

4 posts

• RAG Privacy Attacks: How Retrieval-Augmented Generation Pipelines Leak Private Documents

  RAG makes LLMs accurate by indexing private documents — but the retrieval pipeline introduces a new attack surface. Adversarial queries can extract document chunks, embedding inversions recover original text, and multi-tenant isolation can fail in ways that expose documents across access boundaries.

  Jul 4, 2026 rag privacy data-exfiltration vector-databases embeddings multi-tenant prompt-injection

• Exfiltration via Agent Side Channels: How AI Agents Leak Sensitive Data Indirectly

  When you can't send the data directly, you encode it in everything else. A taxonomy of side-channel exfiltration paths available to compromised AI agents — and why most DLP monitoring misses every one of them.

  Jun 29, 2026 data-exfiltration agent-security side-channels prompt-injection threat-modeling red-teaming

• Indirect Prompt Injection Against Production Systems: A Survey of Documented Disclosures

  Five researcher-disclosed proof-of-concept exploits against production AI systems (2023–2024) reveal recurring structural patterns that defenders can act on today: from Bing Chat web-content sideloading to Microsoft 365 Copilot email exfiltration chains.

  Jun 26, 2026 prompt-injection agent-security incident-analysis data-exfiltration llm-security

• Your Spreadsheet Is the Attack Surface: ChatGPT for Google Sheets Data Exfiltration

  A single hidden prompt in an imported sheet can silently exfiltrate your entire Google Drive workbook collection, replace the ChatGPT sidebar with an attacker-controlled phishing interface, and bypass the extension's own human-approval safety setting. PromptArmor's analysis of the ChatGPT for Google Sheets add-on shows how LLM extensions inherit every permission you've granted — and hand them to whoever controls the data you import.

  Jun 3, 2026 prompt-injection extensions data-exfiltration llm-security supply-chain