CrowdStrike Uncovers New Prompt Injection Techniques

CrowdStrike's security research team has identified 18 new prompt injection techniques (methods where attackers trick AI systems by hiding malicious instructions in their input), expanding their catalog to over 200 total techniques. These attacks are becoming more sophisticated as AI agents gain the ability to access files and run commands, making indirect prompt injection (where attackers hide attacks in data the AI consumes) a critical threat. The new techniques include trigger-activated rules that activate only when certain phrases appear, methods to block safety-related words, breaking malicious instructions into puzzle pieces to evade detection, and exploiting the special formatting markers that AI systems use internally.