AI threats in the wild: The current state of prompt injections on the web

A set of Google Security Blog posts covering active threats and platform hardening: Google Threat Intelligence observed real-world indirect prompt injection (IPI) patterns on the public web and highlights IPI as a top priority for LLM/agent security; Google Workspace (with Gemini) is adopting continuous defenses against IPI. Chrome/Google Account teams announced Device Bound Session Credentials (DBSC) to proactively prevent session cookie theft being abused after malware exfiltration. The Pixel team integrated a memory-safe Rust DNS parser into modem firmware to reduce memory-safety risk. The/