Links
- https://semgrep.dev/blog/2026/comparing-open-source-ai-code-security-harnesses/
- https://projectzero.google/2024/06/project-naptime.html
- https://blog.zsec.uk/tag/ai/
- https://blog.zsec.uk/harnessing-harnesses/
- https://forge.itsbroken.ai/
- https://www.cyberark.com/resources/threat-research-blog/jailbreaking-every-llm-with-one-simple-click
- https://www.cyberark.com/resources/threat-research-blog/anatomy-of-an-llm-rce
- https://www.microsoft.com/en-us/security/blog/2025/11/07/whisper-leak-a-novel-side-channel-cyberattack-on-remote-language-models/
- https://github.com/yo-yo-yo-jbo/whisper_leak
- https://securityaffairs.com/184372/hacking/ai-chat-privacy-at-risk-microsoft-details-whisper-leak-side-channel-attack.html
- https://github.com/p-e-w/heretic
- https://flatt.tech/research/
- https://maccarita.com/posts/idesaster/
- https://maccarita.com/
- https://specterops.io/blog/2025/11/21/an-evening-with-claude-code/
- https://www.reddit.com/r/google_antigravity/comments/1p82or6/google_antigravity_just_deleted_the_contents_of/
- https://github.com/SECFORCE/LLMGoat
- https://brave.com/blog/unseeable-prompt-injections/
- https://www.hexstrike.com/
- https://github.com/elder-plinius/CL4R1T4S
- https://github.com/leondz/lm_risk_cards
- https://reference.garak.ai/en/latest/index.html
- https://avidml.org/
- https://itsbroken.ai/cheatsheet/
- https://github.com/McKern3l/RAGdrag
- https://role-confusion.github.io/
- https://rnsaffn.com/poison3/
- https://embracethered.com/blog/
- https://pluto.security/
- https://github.com/hfd3l/cybersecurity-gpts
- https://secml.readthedocs.io/en/v0.15/
- https://www.microsoft.com/en-us/security/blog/2025/11/07/whisper-leak-a-novel-side-channel-cyberattack-on-remote-language-models/
- https://www.ncsc.gov.uk/blog-post/prompt-injection-is-not-sql-injection
- https://reference.garak.ai/en/latest/ascii_smuggling.html#variant-smuggling
- https://embracethered.com/blog/posts/2024/hiding-and-finding-text-with-unicode-tags/
- https://x.com/rez0__/status/1745545813512663203
- https://embracethered.com/blog/posts/2026/toctou-agent-what-you-click-is-not-what-you-get/
- https://simonwillison.net/2022/Sep/12/prompt-injection/
- https://simonwillison.net/tags/prompt-injection/
- https://specterops.io/blog/2026/06/11/building-an-indirect-prompt-injection-workflow/
- https://www.microsoft.com/en-us/security/blog/2024/06/26/mitigating-skeleton-key-a-new-type-of-generative-ai-jailbreak-technique/
- https://specterops.io/blog/2026/06/10/oops-i-weaponized-the-database-abusing-ai-features-in-mssql-2025
- https://github.com/gershsec/mssql2025-poc
- https://itsbroken.ai/stuck-on-prompt-injection/
- https://specterops.io/blog/2026/06/11/building-an-indirect-prompt-injection-workflow/#
- https://blog.trailofbits.com/2026/03/31/how-we-made-trail-of-bits-ai-native-so-far/