# Preprint finds task-aligned prompt injections defeat more model defenses

_Published Monday, October 26, 2026 at 12:30 PM EDT · Science, Security · Latest · Tier 2 — Notable_

Researchers report that prompt injections designed to preserve much of a legitimate answer while introducing incorrect or harmful changes succeeded more often than fixed-target attacks across every model and setting they evaluated. Their preprint introduces NTBench, a benchmark that uses legitimate reference outcomes to construct these attacks.

The evaluation covered seven language models, ten language-task datasets and two agent benchmarks, with three attack executions per sample. On language tasks, attack success increased by 9.3 to 35.8 percentage points for incorrect targets and 1.7 to 17.3 percentage points for harmful targets.

The tests excluded deviations already observed without injection; the findings concern the evaluated attacks and settings.

## Sources

- [cs.CR updates on arXiv.org](https://arxiv.org/abs/2610.32531)

---
Canonical: https://techandbusiness.org/newswire/BhS0LoNm3vq0FBjwg3bfz1
Published: 2026-10-26T16:30:10.972Z
Story chronology: 2026-10-26T04:00:00.000Z
Retrieved: 2026-10-26T18:55:25.563Z
Publisher: Tech & Business (techandbusiness.org)