PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Introducing the Prompt Airlines CTF: Test Your AI Security Skills

wiz.io | blog | #ai-security | #cloud | #cloud-security | #ctf | #prompt-injection | #security-training | #llm-security
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Wiz launched Prompt Airlines, a chatbot-based CTF where players exploit AI logic flaws to win a free flight ticket, teaching real LLM security risks; open to all skill levels.
Published
Collected

Related coverage

tool · github.com
LLM SecRange: Open-Source Penetration Testing Playground for Large Language Models & Vulnerable Agents
Offers security researchers and penetration testers an out-of-the-box, comprehensive environment to practice prompt injection, OWASP LLM Top 10 risks, and agent tool-abuse exploitation against real models.
blog · wiz.io
Key Takeaways: AI Threat Readiness Survey Report 2026
Read the AI Threat Readiness Report 2026. Benchmark findings across 100 IT leaders on autonomous agent sprawl, identity risks, and modern cloud governance.
blog · aikido.dev
Adding Aikido AI pentesting to your existing security stack
How to add Aikido's AI pentesting on top of the SAST, SCA and cloud tools you already run, from your first pentest through whitebox testing, continuous testing and remediation.
blog · crowdstrike.com
CrowdStrike Expands Falcon Adversary OverWatch Threat Hunting Across AI and Google Cloud
Falcon Adversary OverWatch now includes 24/7 managed hunting for AI applications and autonomous agent activity, and deeper, telemetry-driven hunting for Google Cloud.
blog · vercel.com
The three types of AI bot traffic and how to handle them
Bots account for over 20% of all web traffic. A quarter of that is AI crawlers alone. But not all bots are bad. Some are key to how your site gets discovered. Learn how AI bots shape visibility and what happens if you block them.
blog · blog.sentry.security
ChatML Role Injection (CRI)
Attackers can inject system roles into ChatML message arrays to override developer instructions, invoke hidden tools, and pad payloads for denial-of-wallet DoS; strict schema validation is key.
Back