... nobody covered, which is worse, because it changes a line of code a lot of us shipped this year without thinking about it. If your product has a "paste a URL" box, a link unfurler, an enrichment step, a competitor-monitoring job, or anything that fetches a page and hands it to a model, this is about you. What was actually measured. The paper is "Indirect Prompt Injection in the Wild" by Khodayari, Zhang, Acharya and Pellegrino, out of CISPA ... ... March. Their detections break down as irrelevant output 28.6%, data destruction 14.2%, SEO poisoning 8.1%, unauthorized transactions 6.2%, content moderation bypass 5.5%. Different method, same conclusion - it's real and it's deployed. Two disclosures. Unit 42 is Palo Alto