CrowdStrike Prompt Injection Taxonomy

Global – October 31, 2026 -- CrowdStrike has expanded its public Prompt Injection Taxonomy to 222 techniques, adding attacks that target how autonomous AI agents plan rather than only what they are prompted to do.

Attackers shape the context agents plan from

An agent breaks a goal into steps, picks tools and executes. Attackers no longer need to push one forbidden request past an input or output filter. They can instead shape the context the agent plans from, so a restricted action looks like the logical next step. Because each step can look benign alone, defenses that check steps in isolation may miss what the full plan adds up to.