Not what you've signed up for: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection

An AI security paper published in 2023 that systematically introduced indirect prompt injection attacks, revealed the blurred boundary between data and instructions in LLM-integrated applications, and demonstrated attacks against real applications.