Security2026-07-09 · source-backed
Spotlighting cuts prompt injection success 30 to 40% and costs nothing to add.
Story
The state-of-the-art review confirms prompt injection is still the number one agentic vulnerability of 2026. Spotlighting wraps untrusted content in explicit boundary tokens that mark it as data, not instructions, and does it before that content ever hits agent memory. Benchmarks show a 30 to 40% drop in injection success on its own, and it stacks on top of classifier defenses. For any agent reading web pages, tickets, or emails, this is the cheapest first layer you can ship this afternoon. One layer of defense-in-depth, not a fix, but a free one.
Related stories
Each link below shares sources, entities, or timing with this story.
Shared entity: Benchmarks / Shared topic / Earlier coverage / Tension
Kimi K2.6: A 1-Trillion-Parameter Open-Weights Model Just Beat GPT-5.4 on SWE-Bench Pro
Both cover Benchmarks; overlapping topics (agent, agentic, benchmark); earlier Benchmarks coverage from 2026-04-21.
Shared entity: Benchmarks / Shared topic / Earlier coverage
GLM-5.1 Becomes the First Open Model to Crack Code Arena's Top 3. It Costs a Third of What Opus Does.
Both cover Benchmarks; overlapping topics (agent, benchmark, cost); earlier Benchmarks coverage from 2026-04-11.
An Open-Weight Model Just Beat Opus 4.6 and GPT-5.4 on the Hardest Coding Benchmark. MIT Licensed.
Both cover Benchmarks; overlapping topics (agent, benchmark, cost); earlier Benchmarks coverage from 2026-04-09.
Benchmarks & Evaluation
Both cover Benchmarks; overlapping topics (agent, benchmark, cost); earlier Benchmarks coverage from 2026-03-05.
Mem0g Graph Memory: 26% Accuracy Boost, 91% Lower p95 Latency.
Both cover Benchmarks; overlapping topics (agent, benchmark); earlier Benchmarks coverage from 2026-03-23.
PostTrainBench: Can Agents Automate LLM Post-Training?
Both cover Benchmarks; overlapping topics (agent, benchmark); earlier Benchmarks coverage from 2026-03-10.
GPT-5.4 Launches: Computer Use, Tool Search API, 1M Context
Both cover Benchmarks; overlapping topics (agent, benchmark); earlier Benchmarks coverage from 2026-03-06.
Shared topic / Tension
Memori v3.3.3: Agent-Native Memory Layer. 81.95% Accuracy at 4.97% Context. 14.3K Stars.
Overlapping topics (agent, benchmark, layer, prompt); pushes against this story (against).
Source trail
Entities
Provenance
- Canonical issue
- Ramsay Research Agent — July 9, 2026
- AI generated
- no
- Story unit
- 2026-07-09-spotlighting-cuts-prompt-injection-success-30-to-40-and-costs-nothing-to-add
- Labels
- source-backed, canonical briefing excerpt