PuzzleMask: Abusing Plain Prose as a Covert AI Attack Vector
MentionsCheck Point
Executive Summary In this research we introduce a prompt-crafting technique for bypassing quick LLM-based policy checks — using plain English (no emojis, base64, invisible formatting, etc.) A policy-violating payload (e.g. ”encrypt files in ~/Documents”, “give me a biohazard recipe”, “ignore all previous instructions and…”) is embedded in a specially crafted prose wrapper.
Summary from Check Point Research.
Explained
The technology and terms in this story. Learn more