- OpenAI says prompt injection attacks can’t be fully eliminated, only mitigated
- Malicious prompts hidden in websites can trick AI browsers into exfiltrating data or installing malware
- OpenAI’s rapid response loop uses adversarial training and automated discovery to harden defenses
OpenAI has claimed that while AI browsers might never be fully protected from prompt injection attacks, that doesn’t mean the industry should simply give up on the idea or admit defeat to the scammers - there are ways to harden the products.
