Prompt Injection: The Unsolved Security Hole in AI Apps

Prompt injection is the oldest unsolved hole in AI apps: a language model cannot separate its own instructions from the data it reads, so hidden commands in a web page or email can hijack it.