<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>LLM Security on carney.wiki</title><link>https://carney.wiki/tags/llm-security/</link><description>Recent content in LLM Security on carney.wiki</description><generator>Hugo -- gohugo.io</generator><language>en</language><lastBuildDate>Wed, 10 Dec 2025 00:00:00 +0000</lastBuildDate><atom:link href="https://carney.wiki/tags/llm-security/index.xml" rel="self" type="application/rss+xml"/><item><title>How Prompt Injection Attacks Actually Work</title><link>https://carney.wiki/blog/how-prompt-injection-attacks-actually-work/</link><pubDate>Wed, 10 Dec 2025 00:00:00 +0000</pubDate><guid>https://carney.wiki/blog/how-prompt-injection-attacks-actually-work/</guid><description>Prompt injection is not a clever chatbot trick anymore.
It is one of the core security problems in AI systems.
The reason is uncomfortable: large language models do not reliably separate instructions from data. They interpret text. That text may come from a user, a document, a webpage, a support ticket, an email, a retrieved knowledge base article, or another AI system.
To a human, some of that text is obviously content.</description></item></channel></rss>