llm

Indirect prompt injection in RAG: how a PDF becomes an attack on your assistant

The most common vector we find in AI pentests doesn't come from the user — it comes from the documents your assistant reads. Here's the mechanism,…