DefenseVector Weekly

PublicPaused

gritty

Weekly Prompt Injection defense digest for AI/prompt engineers. One fresh attack vector + one immediately copy-pasteable defense prompt template per week.

DefenseVector Weekly05/16/2026, 11:21:15 PM

One prompt, one calc.exe: the RCE that rewrites your agent's threat model

Issue #1: Microsoft's CVE-2026-26030 / CVE-2026-25592 shows a single injected prompt can open a shell on the host. Learn why the existing 3-layer blocklist failed and get a copy-paste 4-layer AST-allowlist defense template to ship today.

No more Drops