Microsoft researchers have identified a new type of “jailbreak” attack called the “Skeleton Key” that can bypass the safeguards of generative AI systems, allowing them to output dangerous and sensitive information.&nbsp; 
According to a recent Microsoft Security blog post, this attack operates by simply prompting an AI model to enhance its encoded security features. 
<div class="wp-block-image"> 
 <figure class="aligncenter">
 <img decoding="async" src="https://lh7-us.googleusercontent.com/docsz/AD_4nXdzduW7Cp89LG1KOL_FiF7EYUL0FZTShy3Udn5RUKiuSdZ1ws0SE-cZEVvgQ5DAvtGVvvUTRIJKu-zfBcbD0jbFSnziusJ0Gz0X6UoizZaoqB7qiKAnRMujPY3MckF3Xo9ZgpCdFOCbXllrjO-qtrfTEXLr?key=m_5G16UQIl-rSuHZQfz4Nw" alt="Microsoft (Skeleton Key jailbreak technique harms AI systems)&nbsp;">
 <figcaption class="wp-element-caption">
 Image Source: Microsoft (Skeleton Key <a href="https://www.microsoft.com/en-us/security/blog/2024/06/04/ai-jailbreaks-what-they-are-and-how-they-can-be-mitigated/" target="_blank" rel="noreferrer noopener">jailbreak</a> technique harms AI systems)&nbsp;
 </figcaption>
 </figure>
</div> 
In one scenario described by the researchers, an AI model was asked to provide a recipe for a Molotov cocktail, a simple incendiary device known for World War II. Initially, the model refused, citing safety guidelines. However, when the user claimed to be an expert in a laboratory setting, the model altered its behavior and produced a feasible recipe for the device. 
The blog stated, “In bypassing safeguards, Skeleton Key allows the user to cause the model to produce ordinarily forbidden behaviors, which could range from production of harmful content to overriding its usual decision-making rules.” 
While this specific threat might seem less concerning given that similar information is accessible via search engines, the real danger lies in the potential exposure of personally identifiable and financial data.&nbsp; 
<div class="wp-block-image"> 
 <figure class="aligncenter">
 <img decoding="async" src="https://lh7-us.googleusercontent.com/docsz/AD_4nXeOrTBfndJgGLsmzPlg8uB5luthQOK-j614YGhMwrkrCHIOr6dG-7RlcczxlSMeJm5Z0xTA1NeHz_X8nYjSRRxPBfnrbGg4PvDoWawXI5WiT26ghY6qyMWWCUtchmqa2wV3WczG677_qSGOPKlHP99ODDYS?key=m_5G16UQIl-rSuHZQfz4Nw" alt="Microsoft (Text example for a Skeleton Key jailbreak)">
 <figcaption class="wp-element-caption">
 Image Source: Microsoft (Text example for a Skeleton Key jailbreak)
 </figcaption>
 </figure>
</div> 
Microsoft <a href="https://www.microsoft.com/en-us/security/blog/2024/06/26/mitigating-skeleton-key-a-new-type-of-generative-ai-jailbreak-technique/" target="_blank" rel="noreferrer noopener nofollow">warns</a> that the Skeleton Key attack can affect many popular generative AI models, including GPT-3.5, GPT-4, Claude 3, Gemini Pro, and Meta Llama-3 70B. 
Large language models like Google’s Gemini, Microsoft’s CoPilot, and OpenAI’s ChatGPT are trained on massive datasets that may include social media networks and information repositories like Wikipedia.&nbsp; 
The risk that personally identifiable information (PII) such as names, phone numbers, addresses, and account numbers could be embedded in these models is significant, depending on the data selection during training.&nbsp; 
Organizations using AI models, especially those adapting enterprise models for commercial use, face heightened risks. For example, a bank integrating a chatbot with customer data might find its security measures compromised by a Skeleton Key attack, potentially exposing sensitive information. 
To mitigate these risks, Microsoft recommends several defensive measures, including hard-coded input/output filtering and secure monitoring systems to prevent advanced prompt engineering from breaching safety thresholds. These steps are crucial for maintaining the integrity and security of AI systems in an increasingly AI-driven world. 
<blockquote class="wp-block-quote is-layout-flow wp-block-quote-is-layout-flow"> 
 Also Read: <a href="https://www.cryptotimes.io/2024/06/28/cir-sues-openai-microsoft-over-copyrighted-content-use/" target="_blank" rel="noreferrer noopener">CIR Sues OpenAI, Microsoft Over Copyrighted Content Use</a> 
</blockquote>

Microsoft Uncovers AI ‘Skeleton Key’ Threat to Data Security

The Crypto Times

Other articles published on Jun 29, 2024

XRP Price Prediction as the Crypto Market Consolidates: What’s Next?

Kita Foundation Secures VC Investment from FZF Ventures in H1 2024

MoonBag Price Predicted to Increase to $1 by November, Leading the Charge Over Dogwifhat and Flok...

XRP (XRP) Price Prediction: Investing in Cosmic Kittens (CKIT) and XRP (XRP) Tokens Essential for...

CoinStats Hack News: Social Engineering Attack Implicates Employee

Memecoins TRUMP and BODEN React to Presidential Debate

Join our free newsletter for daily crypto updates!