Josh Marpet

Prompt injection embedded in malware turns an LLM scanner's refusal into a free pass

Security Weekly News #615 credits Google's threat tracker with malware carrying text meant to make an LLM scanner decline to analyse it. The exposed decision is what the pipeline writes when the model returns no verdict.