Not What You've Signed Up For: Compromising Real-World LLM-Integrated Applications with Indirect Prompt Injection. - Sahar Abdelnabi; Kai Greshake; Shailesh Mishra; Christoph Endres; Thorsten Holz; Mario Fritz (AISec@CCS, 2023)

More than you've asked for: A Comprehensive Analysis of Novel Prompt Injection Threats to Application-Integrated Large Language Models. - Kai Greshake; Sahar Abdelnabi; Shailesh Mishra; Christoph Endres; Thorsten Holz; Mario Fritz (CoRR, 2023)