NCSC advises organizations to reduce the risk and impact of attacks rather than hope to stop them completely. It also urges users to be wary of vendors who claim they can stop prompt injection.
Microsoft says static permissions alone are not enough to secure agents. Companies need to give each agent its own identity, a controlled execution environment, and limited access paths.
Everyday users can also limit what an agent is allowed to do. Don’t let an agent handle large transactions or delete files. Connect it only to the data it truly needs, and double-check important answers.
Review the permissions of every AI agent you use on a regular basis. The narrower an agent’s access, the less data can leak through prompt injection.
Discover more selected articles and interesting reviews, only at bacatulisan.com