Fetching from the wire…
01
02
03
04
05
06
07
08
Security2026-06-23 · source-backed
Simon Willison's June 22 write-up surfaces "Prompt Injection as Role Confusion" (Ye, Cui, Hadfield-Menell, ICML 2026), which argues injection works because models infer the speaker from a text's style, not its labeled role. The defense: rewrite untrusted input into a neutral voice before the model sees it, which cut attack success from ~61% to ~10% across open and closed models. (Simon Willison) It's not a complete fix, and per the OWASP finding above nothing is, but it's a cheap layer you can add to an input pipeline this week.
Each link below shares sources, entities, or timing with this story.
Simon Willison uses Claude Code / Shared entity: Simon Willison / Same source domain / Shared topic / What happened next / Tension
Linked by a graph relationship (Simon Willison uses Claude Code); both cover Simon Willison; reported by the same outlet (simonwillison.net).
Simon Willison released LLM / Shared entity: Simon Willison / Same source domain / Shared topic / What happened next
Linked by a graph relationship (Simon Willison released LLM); both cover Simon Willison; reported by the same outlet (simonwillison.net).
Simon Willison released LLM / Shared entity: Simon Willison / Same source domain / What happened next / Tension
Linked by a graph relationship (Simon Willison released LLM); both cover Simon Willison; reported by the same outlet (simonwillison.net).
Simon Willison released LLM / Shared entity: Simon Willison / Same source domain / Earlier coverage / Tension
Linked by a graph relationship (Simon Willison released LLM); both cover Simon Willison; reported by the same outlet (simonwillison.net).
Linked by a graph relationship (Simon Willison released LLM); both cover Simon Willison; reported by the same outlet (simonwillison.net).
Simon Willison released LLM / Shared entity: Simon Willison / Same source domain / What happened next
Linked by a graph relationship (Simon Willison released LLM); both cover Simon Willison; reported by the same outlet (simonwillison.net).
Simon Willison uses Codex Desktop / Shared entity: Simon Willison / Same source domain / Earlier coverage
Linked by a graph relationship (Simon Willison uses Codex Desktop); both cover Simon Willison; reported by the same outlet (simonwillison.net).
Simon Willison released LLM / Shared entity: Simon Willison / Same source domain / Earlier coverage
Linked by a graph relationship (Simon Willison released LLM); both cover Simon Willison; reported by the same outlet (simonwillison.net).