Just like phishing for gullible humans, prompt injecting AIs is here to stay

The Register / 4/20/2026

💬 OpinionDeveloper Stack & InfrastructureSignals & Early TrendsIdeas & Deep Analysis

Key Points

  • The article argues that “prompt injection” attacks on AI systems are becoming a persistent security problem, analogous to how phishing exploits human trust.
  • It frames prompt injection as an inevitability of current AI usage patterns, where users supply text instructions and the system may follow malicious or conflicting directives.
  • The piece emphasizes that relying on users (or the AI) to reliably distinguish trustworthy instructions from manipulative ones is a weak defense.
  • It implies that organizations should expect ongoing attempts to subvert AI behavior and treat prompt injection as part of standard threat modeling for AI-enabled products.

Just like phishing for gullible humans, prompt injecting AIs is here to stay

Aren't we all just prompting tokens of linguistic meaning and hoping the other person isn't bullshitting us?

Sun 19 Apr 2026 // 23:00 UTC

kettle It's a week of the year, which means there's been the discovery of yet another prompt injection attack that will force supposedly well-guarded AI bots to spill secrets by asking the right way. 

When you think about it, humans and LLMs share a similar problem: They're both liable to hand over sensitive information when a crafty enough person asks the right - or wrong - way. We call it phishing when it targets humans, and prompt injection is pretty much the same thing for bots. It's basically embedding or hiding malicious instructions inside a document or file that you tell the AI to ingest and analyze; the AI, instead of treating them like part of the content, executes them.

There's a lot to discuss about prompt injection, and how it's basically an unsolvable problem of the AI age akin to phishing, and we cover it all on this week's episode of The Kettle, with host Brandon Vigliarolo joined this week by cybersecurity editor Jessica Lyons and senior reporter Tom Claburn.

You can listen to The Kettle here, as well as on Spotify and Apple Music. ®

More about

TIP US OFF

Send us news