academicResearch
From the reading lists
- Prompt Injection as Role Confusion
ICML (International Conference on Machine Learning) 2026 paper - prompt injection works because LLMs identify roles from writing style, not tags; 'CoT Forgery' forged reasoning lifts attack success from near zero to 60%