{"id":"https://openalex.org/W4415310439","doi":"https://doi.org/10.48550/arxiv.2507.13169","title":"Prompt Injection 2.0: Hybrid AI Threats","display_name":"Prompt Injection 2.0: Hybrid AI Threats","publication_year":2025,"publication_date":"2025-07-17","ids":{"openalex":"https://openalex.org/W4415310439","doi":"https://doi.org/10.48550/arxiv.2507.13169"},"language":"en","primary_location":{"id":"pmh:oai:arXiv.org:2507.13169","doi":null,"is_oa":true,"landing_page_url":"http://arxiv.org/abs/2507.13169","pdf_url":"https://arxiv.org/pdf/2507.13169","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"volume":null,"type":"preprint","is_traditional":true,"indexed_in":["arxiv","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2507.13169","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5114876536","display_name":"Jeremy McHugh","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"McHugh, Jeremy","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5066721568","display_name":"Kristina \u0160ekrst","orcid":"https://orcid.org/0000-0002-0467-7313","observed_orcids":["https://orcid.org/0000-0002-0467-7313"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"\u0160ekrst, Kristina","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5022288145","display_name":"Jonathan Rodriguez Cefal\u00f9","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Cefalu, Jon","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":32,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.5332000255584717,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.5332000255584717,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.45680001378059387,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.003800000064074993,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/prompt-injection","display_name":"prompt injection","score":0.8999999761581421},{"id":"https://openalex.org/keywords/agentic-ai-systems","display_name":"agentic AI systems","score":0.6850000023841858},{"id":"https://openalex.org/keywords/large-language-models","display_name":"large language models","score":0.7279999852180481},{"id":"https://openalex.org/keywords/cross-site-scripting","display_name":"cross-site scripting","score":0.972000002861023},{"id":"https://openalex.org/keywords/cross-site-request-forgery","display_name":"cross-site request forgery","score":1.0},{"id":"https://openalex.org/keywords/web-application-security","display_name":"web application security","score":0.6830000281333923},{"id":"https://openalex.org/keywords/runtime-security","display_name":"runtime security","score":0.8809999823570251},{"id":"https://openalex.org/keywords/privilege-separation","display_name":"privilege separation","score":0.9950000047683716},{"id":"https://openalex.org/keywords/threat-detection","display_name":"threat detection","score":0.6340000033378601},{"id":"https://openalex.org/keywords/web-application-firewall","display_name":"web application firewall","score":0.699999988079071},{"id":"https://openalex.org/keywords/llm-security","display_name":"LLM security","score":0.5529999732971191}],"concepts":[{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.8080000281333923},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.7736999988555908},{"id":"https://openalex.org/C39569185","wikidata":"https://www.wikidata.org/wiki/Q371199","display_name":"Cross-site scripting","level":5,"score":0.7487000226974487},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6991999745368958},{"id":"https://openalex.org/C61423126","wikidata":"https://www.wikidata.org/wiki/Q187432","display_name":"Scripting language","level":2,"score":0.6534000039100647},{"id":"https://openalex.org/C118643609","wikidata":"https://www.wikidata.org/wiki/Q189210","display_name":"Web application","level":2,"score":0.48030000925064087},{"id":"https://openalex.org/C114869243","wikidata":"https://www.wikidata.org/wiki/Q133735","display_name":"Security through obscurity","level":5,"score":0.3937000036239624},{"id":"https://openalex.org/C2780138299","wikidata":"https://www.wikidata.org/wiki/Q3404265","display_name":"Privilege (computing)","level":2,"score":0.38269999623298645},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.374099999666214},{"id":"https://openalex.org/C2780428219","wikidata":"https://www.wikidata.org/wiki/Q16952335","display_name":"Cover (algebra)","level":2,"score":0.3409000039100647},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.3082999885082245},{"id":"https://openalex.org/C86844869","wikidata":"https://www.wikidata.org/wiki/Q2798820","display_name":"Hacker","level":2,"score":0.30799999833106995},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.3000999987125397},{"id":"https://openalex.org/C59241245","wikidata":"https://www.wikidata.org/wiki/Q4781497","display_name":"Web application security","level":4,"score":0.2924000024795532},{"id":"https://openalex.org/C195518309","wikidata":"https://www.wikidata.org/wiki/Q13424265","display_name":"Security testing","level":5,"score":0.2703999876976013},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.2630999982357025},{"id":"https://openalex.org/C150451098","wikidata":"https://www.wikidata.org/wiki/Q506059","display_name":"SQL injection","level":5,"score":0.26100000739097595},{"id":"https://openalex.org/C103377522","wikidata":"https://www.wikidata.org/wiki/Q3493999","display_name":"Security information and event management","level":4,"score":0.2563000023365021},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.25459998846054077},{"id":"https://openalex.org/C71745522","wikidata":"https://www.wikidata.org/wiki/Q2476929","display_name":"Confidentiality","level":2,"score":0.25189998745918274}],"mesh":[],"locations_count":2,"locations":[{"id":"pmh:oai:arXiv.org:2507.13169","doi":null,"is_oa":true,"landing_page_url":"http://arxiv.org/abs/2507.13169","pdf_url":"https://arxiv.org/pdf/2507.13169","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"doi:10.48550/arxiv.2507.13169","doi":"https://doi.org/10.48550/arxiv.2507.13169","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2507.13169","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2507.13169","doi":null,"is_oa":true,"landing_page_url":"http://arxiv.org/abs/2507.13169","pdf_url":"https://arxiv.org/pdf/2507.13169","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4415310439.pdf","grobid_xml":"https://content.openalex.org/works/W4415310439.grobid-xml"},"referenced_works_count":21,"referenced_works":["https://openalex.org/W4294962858","https://openalex.org/W4380353722","https://openalex.org/W4385019259","https://openalex.org/W4385682279","https://openalex.org/W4389523893","https://openalex.org/W4391800306","https://openalex.org/W4392086355","https://openalex.org/W4392538361","https://openalex.org/W4392678053","https://openalex.org/W4393177810","https://openalex.org/W4400484832","https://openalex.org/W4403363860","https://openalex.org/W4403995946","https://openalex.org/W4404834751","https://openalex.org/W4409150456","https://openalex.org/W4411244250","https://openalex.org/W4416034601","https://openalex.org/W4417307818","https://openalex.org/W6891823682","https://openalex.org/W6891874193","https://openalex.org/W7166827633"],"related_works":["https://openalex.org/W4415993128","https://openalex.org/W7140290138","https://openalex.org/W7118532765","https://openalex.org/W7154097462","https://openalex.org/W7163680023","https://openalex.org/W7134255868","https://openalex.org/W7215033899","https://openalex.org/W7126187397","https://openalex.org/W4408836127","https://openalex.org/W4416774529"],"abstract_inverted_index":{"Prompt":[0,107],"injection":[1,81],"attacks,":[2],"where":[3,60],"malicious":[4],"input":[5],"is":[6],"designed":[7],"to":[8,34,45,51,90,128],"manipulate":[9],"AI":[10,58,148],"systems":[11],"into":[12],"ignoring":[13],"their":[14],"original":[15],"instructions":[16],"and":[17,31,68,123,139,152,170,188],"following":[18],"unauthorized":[19],"commands":[20],"instead,":[21],"were":[22],"first":[23],"discovered":[24],"by":[25],"Preamble,":[26],"Inc.":[27],"in":[28],"May":[29],"2022":[30],"responsibly":[32],"disclosed":[33],"OpenAI.":[35],"Over":[36],"the":[37,76],"last":[38],"three":[39],"years,":[40],"these":[41],"attacks":[42,82],"have":[43],"continued":[44],"pose":[46],"a":[47,103],"critical":[48],"security":[49,98,126,131],"threat":[50,77,193],"LLM-integrated":[52],"systems.":[53],"The":[54],"emergence":[55],"of":[56,106],"agentic":[57],"systems,":[59],"LLMs":[61],"autonomously":[62],"perform":[63],"multistep":[64],"tasks":[65],"through":[66],"tools":[67],"coordination":[69],"with":[70,86,115,191],"other":[71,124],"agents,":[72],"has":[73],"fundamentally":[74],"transformed":[75],"landscape.":[78],"Modern":[79],"prompt":[80,112,184],"can":[83],"now":[84],"combine":[85,183],"traditional":[87,97,130,164],"cybersecurity":[88],"exploits":[89],"create":[91],"hybrid":[92,153],"threats":[93],"that":[94,161,182],"systematically":[95],"evade":[96],"controls.":[99],"This":[100],"paper":[101],"presents":[102],"comprehensive":[104],"analysis":[105,157],"Injection":[108],"2.0,":[109],"examining":[110],"how":[111,163],"injections":[113],"integrate":[114],"Cross-Site":[116,119],"Scripting":[117],"(XSS),":[118],"Request":[120],"Forgery":[121],"(CSRF),":[122],"web":[125,165],"vulnerabilities":[127],"bypass":[129],"measures.":[132],"We":[133,177],"build":[134],"upon":[135],"Preamble's":[136],"foundational":[137],"research":[138],"mitigation":[140],"technologies,":[141],"evaluating":[142],"them":[143],"against":[144,174],"contemporary":[145],"threats,":[146],"including":[147],"worms,":[149],"multi-agent":[150],"infections,":[151],"cyber-AI":[154],"attacks.":[155,176],"Our":[156],"incorporates":[158],"recent":[159],"benchmarks":[160],"demonstrate":[162],"application":[166],"firewalls,":[167],"XSS":[168],"filters,":[169],"CSRF":[171],"tokens":[172],"fail":[173],"AI-enhanced":[175],"also":[178],"present":[179],"architectural":[180],"solutions":[181],"isolation,":[185],"runtime":[186],"security,":[187],"privilege":[189],"separation":[190],"novel":[192],"detection":[194],"capabilities.":[195]},"counts_by_year":[{"year":2026,"cited_by_count":23},{"year":2025,"cited_by_count":9}],"updated_date":"2026-11-11T12:16:26.678958","created_date":"2025-10-18T00:00:00"}