Researchers show Grok leaks user data via encrypted prompt injection

Security researchers demonstrated a technique called Cryptographic Context Injection that gets xAI's Grok to exfiltrate user data by encrypting malicious instructions so they evade the model's safety filters. It's described as the latest in a series of methods for breaking LLM safety guardrails.

Why it matters: This is another example of a persistent, unsolved vulnerability class -- prompt injection -- now shown to bypass filters simply by obfuscating instructions rather than exploiting a novel flaw. It underscores that content-based safety filtering alone is not a reliable defense for AI systems handling sensitive user data or tool access.