e
Aug. 1, 2023, 10:15 p.m. |

Embrace The Red embracethered.com

A common attack vector that LLM apps face is data exfiltration, in particular data exfiltration via Image Markdown Injection is a common vulnerability. Microsoft fixed the vulnerability in Bing Chat, ChatGPT is still vulnerable as Open AI “won’t fixed” the issue, and Anthropic just mitigated this vulnerability in Claude.
This post documents the Anthropic Claude data exfiltration vulnerability and the mitigation put in place.
The Vulnerability - Image Markdown Injection As a quick recap, imagine a large language model (LLM) …

anthropic apps attack attack vector bing bing chat chat chatgpt data data exfiltration documents exfiltration image injection issue llm microsoft open ai vulnerability vulnerable

CyberSOC Technical Lead

@ Integrity360 | Sandyford, Dublin, Ireland

Cyber Security Strategy Consultant

@ Capco | New York City

Cyber Security Senior Consultant

@ Capco | Chicago, IL

Sr. Product Manager

@ MixMode | Remote, US

Corporate Intern - Information Security (Year Round)

@ Associated Bank | US WI Remote

Senior Offensive Security Engineer

@ CoStar Group | US-DC Washington, DC