#rag

Indirect Prompt Injection: The Agent Era's Default Vulnerability

As LLM agents gained tools and memory, the dangerous injection stopped coming from the user and started coming from the data the agent reads. A defender's breakdown of why this class resists patching and what containment looks like.