https://greshake.github.io/ https://greshake.github.io/ (discussed https://news.ycombinator.com/item?id=34976886 https://news.ycombinator.com/item?id=34976886 )

https://greshake.github.io/ https://greshake.github.io/ (discussed https://news.ycombinator.com/item?id=34976886 https://news.ycombinator.com/item?id=34976886 ) summarized as > If allowed by the user, Bing Chat can see currently open websites. We show that an attacker can plant an injection in a website the user is visiting, which silently turns Bing Chat into a Social Engineer who seeks out and exfiltrates personal information. The user doesn't have to ask about the website or do anything except interact with Bing Chat while the website is opened in the browser. which is/was also a prompt injection attack but one which had "real world" implications