UK intelligence warns AI 'prompt injection' attacks might never go away

The U.K. National Cyber Security Centre warns that prompt injection — attacks that embed instructions within user-supplied text to manipulate large language models — is a fundamental risk that likely cannot be fully mitigated; researchers should treat it as a confused-deputy-style vulnerability and manage risk through design, limited use, and operational controls rather than expecting a single technical fix.