← Back to Feed

AI threats in the wild: The current state of prompt injections on the web

April 23, 2026 · Google Security Blog · Severity: MEDIUM

We initiated a broad sweep of the public web to monitor for known indirect prompt injection patterns. This is what we found.

Key Takeaways

  • Google swept the public web to monitor for known indirect prompt injection patterns.
  • The broad web sweep reveals the current state of prompt injection threats online.
  • Indirect prompt injection patterns are prevalent across public web content.
☕ Buy a Coffee