- Prompt injection is the top AI security threat because LLMs cannot distinguish between legitimate and malicious instructions.
- Current guardrails only mitigate damage without solving the root cause of separating trusted from untrusted sources.
- Push-based attacks target individuals (e.g., via email) and are limited in scale, while pull-based attacks (e.g., from websites) have also been limited in scale.
- HalluSquatting is a new pull-based attack that exploits LLM hallucinations to target AI coding assistants and agents, enabling large-scale exploits like botnet assembly and DDoS attacks.