Prompt Injection2 articles

Prompt Injection

Articles

Claude Code Opus 5 Auto Mode Bypassed via Python Module Shadowing Exploit
Security researcher Johann Rehberger has published technical details on a multi-stage exploit chain that achieves arbitrary code execution against Claude Code Opus 5 running in Auto Mode. The attack demonstrates how adversarial files can bypass Anthropic's safety classifiers and prompt injection defenses by exploiting standard runtime behavior in Python. Anthropic rolled out Auto Mode as the default starting mode for Claude Code in mid-August 2026. Auto Mode replaces explicit human permission p
August 27, 20261 min
Researcher demonstrates self-replicating AI worm in Microsoft Copilot for Word
A security researcher has demonstrated a prompt injection attack that turns Microsoft Copilot for Word into a propagation vector for self-replicating malicious instructions. The attack, disclosed on July 28 after a 144-day coordination period with Microsoft, remains exploitable with all current mitigations deployed. How the worm works The attack begins when an attacker hides instructions inside a document, using techniques like white-on-white text. When a victim uses that document as source m
August 3, 20261 min