Skip to content
corpus.blog
Sign in Claim your blog
Record · simonw.substack.com

The lethal trifecta for AI agents

simonw.substack.com · 17 June 2025 · 45 min read

A post on simonw.substack.com, published 17 June 2025, is cited by 4 distinct blogs to date (corpus.blog, measured 10 October 2026).

A record is what was published and who pointed at it. The text of the post is not shown here: read it at the source, or at its Wayback capture.

Read at simonw.substack.com (opens in a new tab) Wayback capture (opens in a new tab)

4blogs citing

Citing blogs and links by period
Period Blogs Links
All time44
Last 90 days11
Last 30 days00
Last 7 days00
Figures for this page
First cited14 Aug 2025
Latest citation23 Jul 2026
Words blogs link it with3
External links82
Length10,163
New citing blogs a weeksince Aug 2025
New citing blogs a week, since Aug 2025: 61 weeks, peak 1 a week, latest week 0

0 this week (still settling) · peak 1

Show as table
New citing blogs a week, week by week
Week of Value
11 Aug 20251
18 Aug 20250
25 Aug 20250
1 Sept 20250
8 Sept 20250
15 Sept 20250
22 Sept 20250
29 Sept 20250
6 Oct 20250
13 Oct 20250
20 Oct 20250
27 Oct 20250
3 Nov 20250
10 Nov 20250
17 Nov 20250
24 Nov 20250
1 Dec 20250
8 Dec 20250
15 Dec 20250
22 Dec 20250
29 Dec 20250
5 Jan 20260
12 Jan 20260
19 Jan 20260
26 Jan 20260
2 Feb 20260
9 Feb 20260
16 Feb 20260
23 Feb 20260
2 Mar 20260
9 Mar 20260
16 Mar 20260
23 Mar 20260
30 Mar 20260
6 Apr 20261
13 Apr 20260
20 Apr 20260
27 Apr 20260
4 May 20260
11 May 20260
18 May 20260
25 May 20260
1 Jun 20260
8 Jun 20260
15 Jun 20260
22 Jun 20261
29 Jun 20260
6 Jul 20260
13 Jul 20260
20 Jul 20261
27 Jul 20260
3 Aug 20260
10 Aug 20260
17 Aug 20260
24 Aug 20260
31 Aug 20260
7 Sept 20260
14 Sept 20260
21 Sept 20260
28 Sept 20260 (still settling)
5 Oct 20260 (still settling)

Each blog counts once, in the week of its first citation. A blog added to the index recently can bring old first citations in at once.

Words blogs link it with

The words blogs link this page with, by how many different blogs use them.

  • lethal trifecta2 blogs
  • post1 blog
  • we still don't know how to 100% reliably prevent this from happening1 blog

Cited by 4 blogs in 4 posts

One row per blog, the most recently citing first. Each shows the blog's newest citing post; open a row for the others.

Blog
Newest citing post
Date
Intigriti1 post
AI’s convenience cost. The impact of the lethal trifecta on organizations today

linked as “We still don't know how to 100% reliably prevent this from happening”

Read at intigriti.com (opens in a new tab)
23 Jul 2026
arcade.dev1 post
Beyond EMA: Per-Action Authorization for AI Agents

linked as “lethal trifecta”

Read at arcade.dev (opens in a new tab)
23 Jun 2026
yella.dev1 post
Things I Learnt This Week (Week 15 of 2026): Mental Models, AI Agent Security, Future of Work, Flat Orgs

linked as “post”

Read at yella.dev (opens in a new tab)
8 Apr 2026
simonpcouch.com1 post
R and the Model Context Protocol

linked as “Lethal Trifecta”

Read at simonpcouch.com (opens in a new tab)
14 Aug 2025

Links from this post

Link
Host
https://simonwillison.net/2025/Jun/11/echoleak/ Who cites this page
simonwillison.net
GitHub MCP Exploited: Accessing private repositories via MCP Read at simonwillison.net (opens in a new tab)
simonwillison.net
https://simonwillison.net/2025/May/23/remote-prompt-injection-in-gitlab-duo/ Who cites this page
simonwillison.net
https://simonwillison.net/2023/Apr/14/new-prompt-injection-attack-on-chatgpt-web-version-markdown-imag/ Who cites this page
simonwillison.net
https://simonwillison.net/2023/May/19/chatgpt-prompt-injection/ Who cites this page
simonwillison.net
https://simonwillison.net/2023/Nov/4/hacking-google-bard-from-prompt-injection-to-data-exfiltration/ Who cites this page
simonwillison.net
https://simonwillison.net/2023/Dec/15/writercom-indirect-prompt-injection/ Who cites this page
simonwillison.net
https://simonwillison.net/2024/Jan/19/aws-fixes-data-exfiltration/ Who cites this page
simonwillison.net
https://simonwillison.net/2024/Apr/16/google-notebooklm-data-exfiltration/ Who cites this page
simonwillison.net
https://simonwillison.net/2024/Jun/16/github-copilot-chat-prompt-injection/ Who cites this page
simonwillison.net
https://simonwillison.net/2024/Aug/7/google-ai-studio-data-exfiltration-demo/ Who cites this page
simonwillison.net
https://simonwillison.net/2024/Aug/14/living-off-microsoft-copilot/ Who cites this page
simonwillison.net
https://simonwillison.net/2024/Aug/20/data-exfiltration-from-slack-ai/ Who cites this page
simonwillison.net
https://simonwillison.net/2024/Oct/22/imprompter/ Who cites this page
simonwillison.net
https://simonwillison.net/2024/Dec/16/security-probllms-in-xais-grok/ Who cites this page
simonwillison.net
https://simonwillison.net/2024/Dec/17/johann-rehberger/ Who cites this page
simonwillison.net
https://simonwillison.net/2025/Feb/17/chatgpt-operator-prompt-injection/ Who cites this page
simonwillison.net
https://simonwillison.net/tags/exfiltration-attacks/ Read at simonwillison.net (opens in a new tab)
simonwillison.net
https://modelcontextprotocol.io/ Who cites this page
modelcontextprotocol.io
https://simonwillison.net/2023/May/2/prompt-injection-explained/ Read at simonwillison.net (opens in a new tab)
simonwillison.net
Design Patterns for Securing LLM Agents against Prompt Injections Read at simonwillison.net (opens in a new tab)
simonwillison.net
CaMeL offers a promising new direction for mitigating prompt injection attacks Read at simonwillison.net (opens in a new tab)
simonwillison.net
Simon Willison on GPT-3 prompt injection attacks Read at simonwillison.net (opens in a new tab)
simonwillison.net
Prompt injection and jailbreaking are not the same thing Read at simonwillison.net (opens in a new tab)
simonwillison.net
https://arxiv.org/abs/2506.08837 Who cites this page
arxiv.org
The Dual LLM pattern for building AI assistants that can resist prompt injection Read at simonwillison.net (opens in a new tab)
simonwillison.net
https://simonwillison.net/tags/prompt-injection/ Read at simonwillison.net (opens in a new tab)
simonwillison.net
Google's Approach for Secure AI Agents Read at research.google (opens in a new tab)
research.google
https://simonwillison.net/tags/agent-definitions/ Who cites this page
simonwillison.net
https://news.ycombinator.com/item?id=44242198 Who cites this page
news.ycombinator.com
Malleable software: Restoring user agency in a world of locked-down apps Read at inkandswitch.com (opens in a new tab)
inkandswitch.com
https://datasette.io/ Who cites this page
datasette.io
https://lobste.rs/s/btogou/llms_are_cheap Who cites this page
lobste.rs
https://www.wired.com/story/disney-universal-sue-midjourney/ Who cites this page
wired.com
https://www.wired.com/story/ai-copyright-case-tracker/ Who cites this page
wired.com
https://www.wired.com/story/matthew-butterick-ai-copyright-lawsuits-openai-meta/ Who cites this page
wired.com
https://www.documentcloud.org/documents/25971036-disney-v-midjourney/ Who cites this page
documentcloud.org
https://www.aim.security/lp/aim-labs-echoleak-blogpost Who cites this page
aim.security
https://www.cve.org/CVERecord?id=CVE-2025-32711 Who cites this page
cve.org
The last six months in LLMs, illustrated by pelicans on bicycles Read at simonwillison.net (opens in a new tab)
simonwillison.net
https://simonwillison.net/2025/Jan/18/lessons-from-red-teaming/ Who cites this page
simonwillison.net
https://simonwillison.net/2022/Sep/17/prompt-injection-more-ai/ Read at simonwillison.net (opens in a new tab)
simonwillison.net
https://lucumr.pocoo.org/2025/6/12/agentic-coding/ Who cites this page
lucumr.pocoo.org
https://www.youtube.com/watch?v=sQYXZCUvpIc Who cites this page
youtube.com
https://github.com/mitsuhiko/minijinja/pull/805 Who cites this page
github.com
https://github.com/mitsuhiko/minijinja/pull/804 Who cites this page
github.com
https://www.politico.com/news/2025/05/06/elon-musk-xai-memphis-gas-turbines-air-pollution-permits-00317582 Who cites this page
politico.com
https://www.theguardian.com/technology/2025/apr/24/elon-musk-xai-memphis Who cites this page
theguardian.com
https://simonwillison.net/2025/Jun/12/blog-birthday/ Who cites this page
simonwillison.net
https://simonwillison.net/2022/Jun/12/twenty-years/ Who cites this page
simonwillison.net
https://simonwillison.net/2022/May/31/a-datasette-tutorial-written-by-gpt-3/ Who cites this page
simonwillison.net
How to use the GPT-3 language model Read at simonwillison.net (opens in a new tab)
simonwillison.net
https://simonwillison.net/tags/generative-ai Who cites this page
simonwillison.net
https://www.deeplearning.ai/the-batch/issue-305/ Who cites this page
deeplearning.ai
https://simonwillison.net/2025/Jun/13/blogging-about-papers/ Who cites this page
simonwillison.net
https://simonwillison.net/tags/paper-review/ Who cites this page
simonwillison.net
https://simonwillison.net/2022/Sep/1/sqlite-duckdb-paper/ Who cites this page
simonwillison.net
Link blogging with Simon Willison ⌁ Read at simonwillison.net (opens in a new tab)
simonwillison.net
https://meta.wikimedia.org/wiki/Research:Newsletter Who cites this page
meta.wikimedia.org
https://meta.wikimedia.org/wiki/Research:Newsletter/2025/March Who cites this page
meta.wikimedia.org
https://status.cloud.google.com/incidents/ow5i3PPK96RduMcb1SsW?ref=alonso.network Who cites this page
status.cloud.google.com
https://github.com/redraw/llm-fragments-youtube Who cites this page
github.com
https://simonwillison.net/2025/Apr/7/long-context-llm/ Who cites this page
simonwillison.net
https://gist.github.com/simonw/6098f6e48981d84d1130f34566d0a116 Who cites this page
gist.github.com
https://github.com/yt-dlp/yt-dlp Who cites this page
github.com
https://www.anthropic.com/engineering/built-multi-agent-research-system Who cites this page
anthropic.com
https://simonwillison.net/2025/Jun/2/claude-trace/ Read at simonwillison.net (opens in a new tab)
simonwillison.net
https://github.com/anthropics/anthropic-cookbook/tree/main/patterns/agents/prompts Who cites this page
github.com
https://github.com/anthropics/anthropic-cookbook/blob/46f21f95981e3633d7b1eac235351de4842cf9f0/patterns/agents/prompts/research_lead_agent.md?plain=1 Who cites this page
github.com
https://github.com/anthropics/anthropic-cookbook/blob/46f21f95981e3633d7b1eac235351de4842cf9f0/patterns/agents/prompts/research_subagent.md?plain=1 Who cites this page
github.com
Seven replies to the viral Apple reasoning paper – and why they fall short Read at garymarcus.substack.com (opens in a new tab)
garymarcus.substack.com
https://machinelearning.apple.com/research/illusion-of-thinking Read at machinelearning.apple.com (opens in a new tab)
machinelearning.apple.com
A knockout blow for LLMs? Read at garymarcus.substack.com (opens in a new tab)
garymarcus.substack.com
https://simonwillison.net/tags/llm-reasoning Who cites this page
simonwillison.net
https://www.jsbarretto.com/blog/software-is-joy/ Who cites this page
jsbarretto.com
https://blog.darklang.com/goodbye-dark-inc-welcome-darklang-inc/
blog.darklang.com
https://www.cloudflare.com/galileo/ Who cites this page
cloudflare.com
https://blog.cloudflare.com/celebrating-11-years-of-project-galileo-global-impact/ Who cites this page
blog.cloudflare.com
https://investigatebel.org/en
investigatebel.org
https://simonwillison.net/2025/Jun/16/100-percent/ Who cites this page
simonwillison.net
https://peps.python.org/pep-0779/ Who cites this page
peps.python.org
https://discuss.python.org/t/pep-779-criteria-for-supported-status-for-free-threaded-python/84319/123 Who cites this page
discuss.python.org

Something wrong here? Report a problem