HiddenLayer
hiddenlayer.com · Company blog · on HN since 2022
HiddenLayer is an AI security company whose blog reports on attacks against LLMs, Hugging Face, and agent tooling such as MCP.
What HN saysHN commenters cite its research, such as the universal prompt bypass, as evidence that self-policing AI guardrails can be gamed.
17HN people shared it
5linked it in comments
14stories submitted
351story points
6 months agolast shared
2022people per year2026
Most-shared posts
- 1The Policy Puppetry Attack: Novel bypass for major LLMs6 people · 324 points · first shared 2025 · 231 comments on HN
- 2Hijacking Safetensors Conversion on Hugging Face2 people · 5 points · first shared 2024 · discussion on HN
- 3MCP: Model Context Pitfalls in an agentic world1 people · 11 points · first shared 2025 · 1 comments on HN
- 4Why Traditional Cybersecurity Won't "Fix" AI1 people · 2 points · first shared 2025 · discussion on HN
- 5Echogram: The Vulnerability Undermining AI Guardrails1 people · 2 points · first shared 2025 · 1 comments on HN
- 6Prompts Gone Viral: Practical Code Assistant AI Viruses1 people · 2 points · first shared 2025 · discussion on HN
- 7Malware Found in Trending Hugging Face Repository "Open-OSS/Privacy-Filter"1 people · 1 points · first shared 2026 · discussion on HN
- 8ShadowLogic: Backdoors in Computational Graphs1 people · 1 points · first shared 2024 · discussion on HN
- 9Exploiting MCP Tool Parameters1 people · 1 points · first shared 2025 · discussion on HN
- 10Machine Learning Becomes the New Launchpad for Ransomware1 people · 1 points · first shared 2022 · discussion on HN
- 11The lethal trifecta and how to defend against it1 people · 1 points · first shared 2025 · discussion on HN
- 12R bitrary code execution1 people · first shared 2024
- 13Same model different hat1 people · first shared 2026
What HN people wrote when they linked it
windexh8er · 2026-04-22
Unfortunately it's not that simple. Self-policing AI systems will always be gamed. Just one [0] example of this among many.
[0] https://www.hiddenlayer.com/research/same-model-different-hat
GolfPopper · 2025-05-16
>What if we need top-notch malware to take down the robot dogs lobbing mortars at our madmaxian compound?!
I wouldn't sweat it. According to it's developers, Codex understands 'malicious software', it has just been trained to say, "But I won't do that" when such requests are made to it. Judging from the recent past [1][2] getting LLMs to bypass such safeguards is pretty easy.
1.https://hiddenlayer.com/innovation-hub/novel-universal-bypass-for-all-… 2.https://cyberpress.org/researchers-bypass-safeguards-in-17-popular-llm…
Octplane · 2025-04-26
Using the House MD. prompt extraction roleplay from https://hiddenlayer.com/innovation-hub/novel-universal-bypass-for-all-… it was possible to extract the Assistant prompt, not really interesting, but also the ResearchAgent's prompt and tools provided to the Assistants inside Kagi.
tencentshill · 2025-04-24
phoe-krk · 2024-05-13
Blog post in question: https://hiddenlayer.com/research/r-bitrary-code-execution/