{
 "license": "CC-BY-4.0",
 "attribution": "Fide AI, Agentic Cyber Explorer",
 "url": "https://agentic-cyber-explorer.pages.dev/events/openai-understanding-prompt-injections-2025/",
 "asOf": "2026-09-26",
 "id": "openai-understanding-prompt-injections-2025",
 "date": "2025-11-07",
 "datePrecision": "day",
 "title": "OpenAI describes its layered approach to prompt injection as a frontier security challenge",
 "lane": "defense",
 "kind": "framework",
 "summary": "OpenAI describes prompt injection as social engineering aimed at AI agents and lists its layered defenses: instruction-hierarchy safety training, automated red-teaming, AI-based monitors that can be updated quickly, sandboxing of code-running tools, link approval, confirmation before sensitive steps, logged-out mode in Atlas, and a watch mode on sensitive sites that pauses the agent if the user leaves the tab. It cites thousands of hours of prompt-injection-focused red teaming and a bug bounty, and says it has not yet seen significant attacker adoption of the technique.",
 "whyItMatters": "It is OpenAI's reference statement of its agent prompt-injection defense stack for ChatGPT agent and Atlas.",
 "actors": [
  "openai"
 ],
 "topics": [
  "prompt-injection",
  "monitoring-and-control"
 ],
 "atlas": [
  "untrusted-content",
  "monitor",
  "human-approver"
 ],
 "artifacts": [
  "instruction-hierarchy"
 ],
 "sources": [
  {
   "url": "https://openai.com/index/prompt-injections/",
   "publisher": "OpenAI",
   "title": "Understanding prompt injections: a frontier security challenge",
   "date": "2025-11-07",
   "type": "primary",
   "accessed": "2026-09-25"
  }
 ],
 "keyFacts": [
  {
   "fact": "Measures listed: instruction-hierarchy safety training, automated red teaming, rapidly updatable monitors, sandboxing, link approval, confirmation prompts, logged-out mode, watch mode, bug bounty.",
   "locator": "'Our approach to protecting users' subsections"
  },
  {
   "fact": "OpenAI reports thousands of hours of internal and external red teaming focused specifically on prompt injection.",
   "locator": "'Red-teaming'"
  },
  {
   "fact": "OpenAI says it had not yet seen significant attacker adoption of prompt injection but expects adversaries to invest heavily in it.",
   "locator": "'Looking ahead'"
  }
 ],
 "significance": 3,
 "fideQuestions": [
  "FID-074",
  "FID-076"
 ],
 "methods": [
  "adaptive-red-teaming",
  "ai-monitoring",
  "human-approval",
  "indirect-prompt-injection",
  "instruction-priority-training"
 ],
 "review": "assistant-drafted",
 "addedOn": "2026-09-25"
}