Automatically Finding Prompt Injection Attacks
schneier.com