you never know who you're talking to and what is being done

Artificial intelligence. Real risk.

The full recording of our webinar on LLM prompt injection: how attackers are exploiting AI systems in the wild, and what you can do to stop them. With James Dale, Ibai Castells and Pablo Sanchez from CovertSwarm’s offensive team.

Why prompt injection is one of the most urgent security risks in AI adoption

How attackers manipulate prompts to exfiltrate data and bypass enterprise controls

A breakdown of OWASP LLM01:2025 and the real-world risks behind it

Practical defences, from input validation to red team simulation

Watch on demand

LLM prompt injection attacks in the wild.

As large language models reshape how businesses operate, they’re also opening new routes for attackers. Prompt injection tops the OWASP Top 10 for LLM applications, and it’s already being used against AI systems in production.

In this session, three practitioners who attack systems for a living explain how it works, why it’s so hard to defend against, and where to start.

How attackers turn your AI against you, what OWASP LLM01:2025 means in practice, and the defences that hold up under real attack.

Three silhouetted people and a dog walk along a concrete underpass wall, lit by low warm sunlight, with a metal stairway rising to the right.

Your AI follows instructions.

An LLM can’t reliably tell the difference between the instructions you gave it and the ones hidden in the content it reads.

Attackers use that to leak sensitive data, override guardrails and get around enterprise controls. The panel shows how it plays out in real attacks.

LLM01:2025, without the jargon.

Prompt injection is number one on the OWASP Top 10 for LLM applications.

The session breaks down what the category covers, from direct injection to instructions hidden in documents and web pages, and which risks matter most for your own deployments.

Rows of monitors seen from behind with tangled, exposed cabling, evoking the exposed API a social engineering attack used to breach a telecom provider.
Only the best are followed

Defence starts with attacking it yourself.

Input validation helps, but no single control solves prompt injection.

Learn how layered defences and red team simulation show you how your AI systems behave under real attack, before someone else finds out first.