📚 Resources

• Crescendo: The Multi-Turn LLM Jailbreak Attack (USENIX Security 2025): https://www.usenix.org/system/files/conference/usenixsecurity25/sec25cycle1-prepub-805-russinovich.pdf
• Indirect prompt injection via RAG/email agents — 2025 case studies (Lakera): https://www.lakera.ai/blog/indirect-prompt-injection
• tldrsec/prompt-injection-defenses (catalog of attacks and defenses): https://github.com/tldrsec/prompt-injection-defenses
• Simon Willison: "the lethal trifecta": https://simonwillison.net/2025/Jun/16/the-lethal-trifecta/
• Not what you've signed up for (Greshake et al., arXiv): https://arxiv.org/abs/2302.12173
• Gandalf (Lakera) prompt-injection game: https://gandalf.lakera.ai/

Week 04 · Prompt Injection Defenses and Input Validation

Notion ID: 392c08fd-0278-8162-8176-d72f914761d0 Notion URL: https://app.notion.com/p/392c08fd027881628176d72f914761d0