PuzzleMask: The Prompt Injection Hiding in Plain Sight

PuzzleMask is a new prompt injection technique (a method of tricking an AI by hiding instructions in its input) that hides malicious instructions inside normal, well-written text, allowing it to bypass security checks that typically look for obvious signs of tampering like unusual encoding or special characters. The attack targets a common setup in AI systems where a smaller model screens requests before they reach the main AI model, and it succeeds because the security checks don't catch hidden instructions buried in regular-looking sentences.