Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchPC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Prompt injection is untrusted text that an AI model mistakes for an instruction. One email can influence an AI agent if the agent reads that message and includes its contents in the model’s context. The email does not gain new authority or permissions: what the agent can do with the malicious instruction depends on the data and tools it already has access to, and on the safeguards around those capabilities.
What is prompt injection?
Prompt injection is an attempt to steer a language model by placing instructions where the model is expected to process data. The core problem is that the model may not reliably distinguish trusted directions from untrusted text embedded in an email, web page, document, or tool result.
As an Amazon Associate I earn from qualifying purchases.
A direct prompt injection comes from someone entering instructions into the AI interaction itself. An indirect prompt injection arrives through outside content the AI is asked to read. Email is one possible carrier. Microsoft notes that an attack does not need a special attachment or elaborate encoding: ordinary plain text can be enough. Formatting or non-printing characters may be used to conceal text, but concealment is not required. Microsoft’s July 2025 explanation of indirect prompt injection describes how attacker-controlled content can be incorporated alongside the user’s instruction and misinterpreted by the model.
Do these 3 things before closing this tab:
1Fix the driver behind crashes, sound loss and screen glitches2Clear out junk files and repair common Windows errors3Scan for outdated or missing drivers - takes under a minuteHow can one email influence an AI agent?
- An attacker controls or influences the content of a message sent to the user.
- An AI assistant retrieves or reads that message, perhaps to summarize it or complete a requested email task.
- The message text becomes part of the material the model processes alongside the user’s request.
- The model may treat an instruction in that untrusted text as relevant and let it influence its answer or next step.
- The agent’s existing access to data and tools determines what consequences are possible.
That is what “control” means in this context: influence over model behavior, not a guarantee that an email can bypass every safeguard, take over the whole system, or grant itself new permissions. The same risk pattern can occur when untrusted instructions arrive in a tool response or another source the agent processes.
#1 Best Overall
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
What could go wrong—and what limits the impact?
Possible outcomes include a manipulated answer, an attempt to disclose data the agent can access, or an unintended action using a connected tool. Microsoft describes examples such as attempts to extract user data or, in an application with email-sending capability, send deceptive messages. An email cannot itself confer that capability; the agent must already have the relevant access.
Influence alone is not automatically a security vulnerability. Microsoft distinguishes a model being steered from a security impact: the concern becomes a vulnerability when the behavior leads to consequences such as data exfiltration or an action the user did not request. Microsoft’s security research article states: “Indirect prompt injection is an inherent risk that arises from the probabilistic language modelling, stochastic generation, and linguistic flexibility of modern LLMs.” That is Microsoft’s characterization of the underlying risk, not a claim that every injected instruction succeeds.
What does the LLMail-Inject challenge show?
Microsoft’s LLMail-Inject challenge, which ran from December 2024 through February 2025, simulated an LLM-connected email client that could read messages and take actions on a user’s behalf, including sending email. Participants attempted to make it perform an action the user had not requested while bypassing defenses. Microsoft reported 621 registered participants grouped into 224 teams, with 370,724 submissions. Those are challenge participation and submission counts—not real-world incident counts, attack success rates, or estimates of how often AI agents are compromised. Microsoft’s LLMail-Inject announcement describes the exercise.
Rank #2
- POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
Microsoft’s July 2025 article also said indirect prompt injection was the top entry in OWASP’s 2025 Top 10 for LLM Applications and Generative AI. That is a dated statement from the article; rankings can change. The cited material does not establish a reliable prevalence or success-rate figure for real-world email prompt-injection attacks.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.How can organizations reduce the risk?
No single filter can guarantee that prompt injection will be caught. Defenses work at different points in the system and serve different purposes: inspecting incoming content, limiting what the model can act on, and controlling consequences if detection misses something.
Inspect email at ingress
Microsoft Defender for Office 365’s Prompt Shields documentation describes scanning inbound message subject and body content, including HTML, hidden or off-screen text, quoted or forwarded text, and normalized encoded segments. Its documented scope includes attempts to exfiltrate data through URLs, reveal system prompts, or discover tools. Microsoft also says ordinary instruction-like wording cannot simply be blocked without disrupting legitimate business messages, so email filtering is not a substitute for runtime safeguards. These are documented capabilities and scope for that Microsoft product, not a guarantee for all email filters.
Rank #3
- Security Key : Protect your online accounts against unauthorized access by using FIDO2 and U2F authentication with T110. It's the world's most protective security key that works with windows, Mac OS, Linux as well as Chrome, Firefox, Edge and many other major browsers.
- Certified with the new FIDO2 standard, T110 provides the benefit of fast login and strong protection against phishing, account takeover as well as many other online attactks.
- Works with : Bank of America, Github, Google, Microsoft, DUO, Twitter, Facebook, Dropbox, Apple, ebay, BINANCE, mor and more.
- Fits USB-A port : Insert the T110 security key into the USB-A port of each service and log in conveniently with one touch
- For the driver download and user guide, please visit TrustKey Solutions Home support page.
Protect the model and retrieval path
Keep trusted instructions separate from untrusted email and other retrieved content, classify or inspect inputs, and constrain how retrieved text can affect the agent. Microsoft describes Prompt Shields as a probabilistic classifier and notes that defenses may be evaded; classification should therefore be one layer rather than the only barrier. Microsoft’s Prompt Shields overview provides details on that approach.
Recommended Free Tools
Limit data and tools to the task
Give an agent only the data access and tool permissions it needs. Fine-grained permissions reduce the damage possible if the model follows malicious text: an assistant that cannot access a mailbox folder or send a message cannot use those capabilities in response to an injection.
Put controls on consequential actions
Block known harmful effects and exfiltration routes where possible. For actions with lasting or external consequences, require explicit human approval when other controls cannot adequately contain the risk. Microsoft cites Outlook’s “Draft with Copilot” flow—in which a user reviews and sends generated text—as an example of keeping a person in the action loop.
Rank #4
- POWERFUL SECURITY KEY: The YubiKey 5C NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5C NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5C NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
Log and monitor agent activity
Logging, monitoring, detection, and response help teams investigate attempted attacks and possible bypasses. OWASP’s agentic AI threat guidance covers related risks such as tool abuse, data exfiltration, memory poisoning, goal hijacking, and excessive autonomy. The UK National Cyber Security Centre’s explanation also describes indirect injection through reference content and manipulation through tool responses or connected systems.
When assessing an agent’s defenses, check where inspection occurs, which content and encodings it covers, how narrowly data and tools are scoped, whether external actions are blocked or require approval, and what telemetry supports investigation. The cited sources do not provide a neutral vendor comparison or comparative effectiveness rates.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
