How Prompt Injection Is Breaking Digital Forensics Norms

Why Traditional Logs Can't Explain What Happens Inside a Rogue AI Model Rashmi Ramesh (rashmiramesh_) • November 11, 2025

Logs are where cybersecurity teams spot how and when the break in occurred. For a new type of attack, logs will be worthless - a condition that will especially challenge digital responders as artificial intelligence systems become more ubiquitous.

See Also: Mastercard on Agentic Payments: How AI Agents, Tokenization, and Authentication Will Redefine Digital Commerce

The attack is a prompt injection, which target a model's reasoning rather than its code. "In half of the successful attacks or abuses of an AI system, there was no meaningful security alert at all," said Dorian Granosa, head of research at SPLX. There's a "worrying lack of visibility into attacks and misuse".

In red-team exercises across AI-powered workflows, Granosa's team found that even when defenders knew something had gone wrong, reconstructing ...