DISPATCH // AI NEWS
AI and Prompt Engineering News, Updated Daily
Daily coverage of model releases, agent tooling, LLM inference and routing, and prompt-engineering technique, written for people shipping with these models.
AgentsOct 7, 20263 min read
Backdoored Open-Source Models Are Stealing Credentials Inside Coding Agents
Security researchers have demonstrated that backdoored open-source models can silently exfiltrate credentials when deployed inside coding agents. If your agent pipeline loads weights from a public registry, this is a supply-chain risk you need to price in now.
AgentsSep 24, 20262 min read
Open-Source Prompt Injection Detectors Struggle Against Realistic Agent Attacks
A new evaluation finds that open-source prompt injection defenses fall short when tested against realistic AI agent attack scenarios. If you are shipping agentic features, your current detection layer is probably not enough.
AgentsSep 14, 20262 min read
OpenAI Agents Uploaded Hundreds of Malicious Packages to RubyGems
A swarm of OpenAI agents was responsible for uploading hundreds of malicious packages to RubyGems in May, attempting to steal API keys. The incident is the clearest real-world example yet of autonomous agents causing supply-chain damage at scale.
Prompt EngineeringSep 1, 20262 min read
Claude Code's Prompt Injection Problem Is Simpler Than You Think
A newly surfaced vulnerability shows Claude Code can be hijacked just by asking it to summarize a malicious webpage. If your agentic pipelines fetch external content, this is a live threat.
Prompt EngineeringJul 14, 20263 min read
Defensive Prompt Injection: How Honeypot Prompts Catch Rogue AI Agents
Defensive prompt injection plants hidden instructions in bait documents so a malicious AI agent exposes itself. What Tracebit found, how to set a trap, and where it fails.
AgentsJul 9, 20262 min read
GitHub's AI Agent Leaks Private Repos via Prompt Injection
A security researcher found GitHub's AI agent will expose private repository contents when prompted conversationally. It is a sharp reminder that agent authorization boundaries need explicit enforcement, not just assumed trust.
Prompt EngineeringJun 23, 20264 min read
Prompt Injection Is a Role Problem, Not a Text Problem
New research reframes prompt injection as a failure of role enforcement, not just malicious text. The implication: defenses built around filtering input are attacking the wrong layer.