Follow the latest coverage, related explainers and connected technology stories.
A survey conducted by Google’s threat intelligence teams of public web content shows that various actors have begun experimenting with indirect prompt injection to target artificial intelligence systems, with the malicious category increasing by 32% between November 2025 and February 2026. Despite the limited sophistication of the observed attacks, Google expects their volume and complexity to grow as artificial intelligence systems become more capable and the cost of carrying out attacks declines.