AI threats in the wild: The current state of prompt injections on the web

This collection of Google Security Blog posts highlights multiple active and emerging threats and Google’s mitigations: researchers observed real-world indirect prompt injection (IPI) patterns on the public web and call IPI a top priority for AI/LLM security, with Workspace receiving continuous defenses against IPI. Chrome is rolling out Device Bound Session Credentials (DBSC) to prevent cookie-theft-based account takeover from infostealer malware (e.g., LummaC2). Pixel modem firmware is being hardened by integrating a memory-safe Rust DNS parser to reduce widespread modem memory-safety bugs,,