[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"branding":3,"analytics":7,"article-new-study-treats-prompt-injection-as-a-search-problem":10,"sections":35},{"siteName":4,"siteTagline":5,"publisherName":4,"contactEmail":6},"The Revision","Tech news, decoded.","editor@therevision.news",{"gaMeasurementId":8,"adsenseClientId":9},"G-ZW2MV82GYR","ca-pub-8533917693782264",{"article":11},{"id":12,"slug":13,"title":14,"dek":15,"body_md":16,"tags_json":17,"published_at":18,"created_at":19,"updated_at":20,"status":21,"review_note":22,"review_notes":23,"image_url":22,"persona_id":22,"persona_name":22,"section":24,"tags":25,"sources":30,"feedback":34,"feedback_at":22,"cost_usd":34,"total_tokens":34},6124,"new-study-treats-prompt-injection-as-a-search-problem","New Study Treats Prompt Injection as a Search Problem","A new arXiv paper shows that giving an AI attacker more compute to search for prompt injection exploits makes it dramatically better at finding them.","A new study treats prompt injection attacks like a search problem - and the more compute you give the attacker, the more holes it finds.\n\nResearchers built an agentic attacker with a dedicated search harness that scouts the target environment, reasons through possible attack strategies, and adjusts its approach based on feedback from the victim AI agent. Tested across a range of tasks, the attacker's success at finding and exploiting vulnerabilities climbed as it was given more test-time compute to search. Ablation tests showed that without explicit strategy management, the attacker wasted its budget repeating failed approaches instead of discovering new weaknesses, meaning raw compute alone was not enough - the search had to be organized.\n\nThe real point here is that how vulnerable an AI agent looks isn't fixed - it depends on how much computational effort an attacker is willing to spend probing it. That undercuts the common practice of testing a system once and declaring it secure, since a better-resourced adversary with a larger search budget can likely find exploits a quick test misses. For any team deploying agents that read untrusted text - emails, web pages, documents - this reframes prompt injection as an ongoing arms race rather than a bug to patch once.\n\nWorth noting: the researchers built both the attacker and the yardstick for success, so how this maps to real-world attacker budgets and real-world defenses is still an open question.","[\"prompt injection\",\"ai security\",\"agentic ai\",\"llm safety\"]","2026-09-07T04:00:00.000Z","2026-09-07T05:03:41.954Z","2026-09-07T05:03:53.929Z","published",null,[],"security",[26,27,28,29],"prompt injection","ai security","agentic ai","llm safety",[31],{"name":32,"url":33},"arXiv cs.AI","https:\u002F\u002Farxiv.org\u002Fabs\u002F2609.04495",0,{"sections":36},[37,41,44,49,54,59,64,69,74,79,84,89,94,99],{"name":38,"slug":39,"count":40,"latest_published_at":18},"AI","ai",3399,{"name":42,"slug":24,"count":43,"latest_published_at":18},"Security",568,{"name":45,"slug":46,"count":47,"latest_published_at":48},"Policy","policy",310,"2026-09-06T15:34:34.000Z",{"name":50,"slug":51,"count":52,"latest_published_at":53},"Deals","deals",179,"2026-06-29T20:02:07.000Z",{"name":55,"slug":56,"count":57,"latest_published_at":58},"Hardware","hardware",152,"2026-09-03T09:26:48.000Z",{"name":60,"slug":61,"count":62,"latest_published_at":63},"Consumer Tech","consumer-tech",97,"2026-09-04T15:29:18.000Z",{"name":65,"slug":66,"count":67,"latest_published_at":68},"Science","science",96,"2026-09-03T22:30:00.000Z",{"name":70,"slug":71,"count":72,"latest_published_at":73},"Software","software",73,"2026-08-18T07:51:50.000Z",{"name":75,"slug":76,"count":77,"latest_published_at":78},"Dev Tools","dev-tools",69,"2026-08-18T04:00:00.000Z",{"name":80,"slug":81,"count":82,"latest_published_at":83},"Startups","startups",54,"2026-09-04T23:36:14.000Z",{"name":85,"slug":86,"count":87,"latest_published_at":88},"Gaming","gaming",41,"2026-07-09T04:00:00.000Z",{"name":90,"slug":91,"count":92,"latest_published_at":93},"General","general",39,"2026-09-05T16:13:57.000Z",{"name":95,"slug":96,"count":97,"latest_published_at":98},"Reviews","reviews",20,"2026-06-24T12:00:01.000Z",{"name":100,"slug":101,"count":102,"latest_published_at":103},"How-To","how-to",6,"2026-06-16T09:00:00.000Z"]