prompt injection

Google DeepMind began a broad rollout of Gemini 4 Argon on Oct 13, 2026 and published details of its safety stack. The company claims the model solved all 12 end-to-end simulated cyberattack scenarios, up from five in the prior generation, and cut shortcut attempts on coding benchmarks to 2%.

OpenAI's new GPT-6 Astra model shows major improvements in hallucination rates and jailbreak resistance over predecessor GPT-5.6 Sol, according to OpenAI's system card. However, indirect prompt injection attacks hidden in documents still succeed 8.5% of the time in external testing by Gray Swan, down from 27% but still above rival Claude Opus 5's 4.8% rate.

Anthropic is embedding a dedicated browser into Claude Cowork's desktop app, opening in a side panel whenever a task requires web access. The browser is isolated from the user's own tabs, bookmarks, and passwords, and rolls out this week to Pro, Max, Team, and Enterprise plans.

Anthropic's system card for Claude Opus 5 reports a 0% prompt injection success rate across 129 browser agent test scenarios when Auto Mode is enabled. On Gray Swan's broader indirect prompt injection benchmark, Opus 5 posted a 2.0% attacker success rate after 15 attempts, the lowest among tested frontier models.