Security · Threat model

The Lethal Trifecta

Video + articles

Video

BSidesCharm 2026 - Breaking the Lethal Trifecta: Architectural Prompt Injection Defenses

BSidesCharm · 24 min · June 30, 2026

Articles

The lethal trifecta for AI agents: private data, untrusted content, and external communication

Simon Willison's Weblog · Simon Willison · June 16, 2025

My Lethal Trifecta talk at the Bay Area AI Security Meetup

Simon Willison's Weblog · Simon Willison · August 9, 2025

New prompt injection papers: Agents Rule of Two and The Attacker Moves Second

Simon Willison's Weblog · Simon Willison · November 2, 2025

Supplementary

Andrew Bullen - Breaking the Lethal Trifecta (Without Ruining Your Agents) | [un]prompted 2026

unprompted · 19 min · March 25, 2026