AI threats in the wild: The current state of prompt injections on the web
2026-04-26T13:23:39Z•1721bad7f2a52760f2f9ca532d7e9b1610671d6e7cb198319d3e63cb40165a79
AI securityAndroid 17DBSCDNS parserGeminiGoogle WorkspaceLLM securityLummaC2MTCMerkle Tree CertificatesPLANTSPQCPixel basebandRustVRPcertificate transparencycookie theftdevice bound session credentialsindirect prompt injectioninfostealermemory safetypost-quantum cryptographyprompt injectionquantum-safe HTTPSvulnerability rewards program
What happened
Collection of Google Security Blog posts (Apr–Mar 2026) covering multiple forward-looking and operational security efforts: (1) Indirect Prompt Injection (IPI) is identified as a top-priority AI attack vector — Google performed broad web sweeps to detect IPI patterns and described ongoing detection/mitigation work; (2) Google Workspace / Gemini teams detail a continuous, layered approach to mitigating IPI in multi-source LLM applications; (3) Device Bound Session Credentials (DBSC) are entering public availability on Windows Chrome 146 (macOS coming), shifting cookie-theft defenses from post‑d
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- google_security_blog
- Record identifier
- 1721bad7f2a52760f2f9ca532d7e9b1610671d6e7cb198319d3e63cb40165a79
- Enrichment time
- 2026-04-26T13:23:39Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.