CYBERSECURITYTRACKER
Permanent story citation

Encrypted Prompts Bypass AI Safety Guardrails in Grok and Gemini

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 4855

As cited

Copy frozen at (site build).

ai security

Encrypted Prompts Bypass AI Safety Guardrails in Grok and Gemini

Researchers have discovered a technique called Cryptographic Context Injection that encrypts malicious instructions to bypass safety filters in large language models like Grok and Gemini. The encrypted prompts remain hidden until decryption occurs inside a trusted execution environment, allowing harmful requests to evade content moderation.

Why it matters: AI platform operators and organizations deploying LLMs need to evaluate whether encrypted prompt injection poses a practical risk to their safety architectures and consider additional validation layers beyond input filtering.

Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

ai security

Encrypted Prompts Bypass AI Safety Guardrails in Grok and Gemini

No summary had been written when this copy was frozen.

First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

ai security

Encrypted Prompts Bypass AI Safety Guardrails in Grok and Gemini

Researchers have demonstrated a technique called Cryptographic Context Injection that encrypts malicious prompts to bypass safety guardrails in artificial intelligence (AI) models including Grok and Gemini. The encrypted instructions remain hidden until decrypted within a trusted execution environment, effectively circumventing content moderation systems. This attack reveals a gap in how AI systems validate input before processing sensitive requests.

Why it matters: Organizations deploying Grok, Gemini, or similar AI systems need to assess whether their trust boundaries and input validation can be exploited through encrypted prompt injection, and security teams should monitor for signs of this technique in production deployments.

Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary