HiddenLayer

hiddenlayer.com · Company blog · on HN since 2022

HiddenLayer is an AI security company whose blog reports on attacks against LLMs, Hugging Face, and agent tooling such as MCP.

What HN saysHN commenters cite its research, such as the universal prompt bypass, as evidence that self-policing AI guardrails can be gamed.
17HN people shared it
5linked it in comments
14stories submitted
351story points
6 months agolast shared
2022people per year2026

Most-shared posts

  1. 1
    The Policy Puppetry Attack: Novel bypass for major LLMs
    6 people · 324 points · first shared 2025 · 231 comments on HN
  2. 2
    Hijacking Safetensors Conversion on Hugging Face
    2 people · 5 points · first shared 2024 · discussion on HN
  3. 3
    MCP: Model Context Pitfalls in an agentic world
    1 people · 11 points · first shared 2025 · 1 comments on HN
  4. 4
    Why Traditional Cybersecurity Won't "Fix" AI
    1 people · 2 points · first shared 2025 · discussion on HN
  5. 5
    Echogram: The Vulnerability Undermining AI Guardrails
    1 people · 2 points · first shared 2025 · 1 comments on HN
  6. 6
    Prompts Gone Viral: Practical Code Assistant AI Viruses
    1 people · 2 points · first shared 2025 · discussion on HN
  7. 7
  8. 8
    ShadowLogic: Backdoors in Computational Graphs
    1 people · 1 points · first shared 2024 · discussion on HN
  9. 9
    Exploiting MCP Tool Parameters
    1 people · 1 points · first shared 2025 · discussion on HN
  10. 10
  11. 11
    The lethal trifecta and how to defend against it
    1 people · 1 points · first shared 2025 · discussion on HN
  12. 12
    R bitrary code execution
    1 people · first shared 2024
  13. 13
    Same model different hat
    1 people · first shared 2026

What HN people wrote when they linked it

windexh8er · 2026-04-22
Unfortunately it's not that simple. Self-policing AI systems will always be gamed. Just one [0] example of this among many. [0] https://www.hiddenlayer.com/research/same-model-different-hat
GolfPopper · 2025-05-16
>What if we need top-notch malware to take down the robot dogs lobbing mortars at our madmaxian compound?! I wouldn't sweat it. According to it's developers, Codex understands 'malicious software', it has just been trained to say, "But I won't do that" when such requests are made to it. Judging from the recent past [1][2] getting LLMs to bypass such safeguards is pretty easy. 1.https://hiddenlayer.com/innovation-hub/novel-universal-bypass-for-all-… 2.https://cyberpress.org/researchers-bypass-safeguards-in-17-popular-llm…
Octplane · 2025-04-26
Using the House MD. prompt extraction roleplay from https://hiddenlayer.com/innovation-hub/novel-universal-bypass-for-all-… it was possible to extract the Assistant prompt, not really interesting, but also the ResearchAgent's prompt and tools provided to the Assistants inside Kagi.

Keyboard shortcuts

/Search
j kNext / previous blog
EnterOpen selected blog
vVisit the blog site
fFollow / unfollow
lSwitch grid / list view
dSwitch dark mode
g hHome
g pTop posts
g tTopics
g fFollowing
g lLiked
g yHistory
g qFAQ
EscBack / close