{"data":{"id":"e048a71a-a6ab-43d0-a170-f17cc6ae0d64","title":"PuzzleMask: The Prompt Injection Hiding in Plain Sight","summary":"PuzzleMask is a new prompt injection technique (a method of tricking an AI by hiding instructions in its input) that hides malicious instructions inside normal, well-written text, allowing it to bypass security checks that typically look for obvious signs of tampering like unusual encoding or special characters. The attack targets a common setup in AI systems where a smaller model screens requests before they reach the main AI model, and it succeeds because the security checks don't catch hidden instructions buried in regular-looking sentences.","solution":"N/A -- no mitigation discussed in source.","labels":["security","safety"],"sourceUrl":"https://blog.checkpoint.com/security/puzzlemask-the-prompt-injection-hiding-in-plain-sight/","publishedAt":"2026-09-10T15:59:34.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"high","attackType":["prompt_injection","jailbreak"],"issueType":"news","affectedPackages":null,"affectedVendors":[],"affectedVendorsRaw":[],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"patchAvailable":null,"disclosureDate":"2026-09-10T15:59:34.000Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["integrity","safety"],"aiComponentTargeted":"inference","llmSpecific":true,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null}}