#rag

Prompt Injection via Retrieved Documents: The RAG Attack Surface

How attacker-controlled content reaches the model through retrieval pipelines, the variants that still land against production RAG stacks, and the defender's realistic options.