{"id":71656,"date":"2025-11-10T21:50:50","date_gmt":"2025-11-10T21:50:50","guid":{"rendered":"https:\/\/one.sightlinemg.com\/defensenews\/uncategorized\/2025\/11\/10\/military-experts-warn-security-hole-in-most-ai-chatbots-can-sow-chaos\/"},"modified":"2026-08-08T01:25:25","modified_gmt":"2026-08-08T01:25:25","slug":"military-experts-warn-security-hole-in-most-ai-chatbots-can-sow-chaos","status":"publish","type":"post","link":"https:\/\/one.sightlinemg.com\/defensenews\/land\/2025\/11\/10\/military-experts-warn-security-hole-in-most-ai-chatbots-can-sow-chaos\/","title":{"rendered":"Military experts warn security hole in most AI chatbots can sow chaos"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Current and former military officers are warning that adversaries are likely to exploit a natural flaw in artificial intelligence chatbots to inject instructions for stealing files, distorting public opinion or otherwise betraying trusted users. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The vulnerability to such \u201cprompt injection attacks\u201d exists because large language models, the backbone of chatbots that digest hordes of user text to generate responses, cannot distinguish between malicious and trusted user instructions. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u201cThe AI is not smart enough to understand that it has an injection inside, so it carries out something it\u2019s not supposed to do,\u201d Liav Caspi, a former member of the Israel Defense Forces cyberwarfare unit, told Defense News.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In effect, \u201can enemy has been able to turn somebody from the inside to do what they want,\u201d such as deleting records or biasing decisions, according to Caspi, who co-founded Legit Security, which recently spotted one such <a href=\"https:\/\/www.legitsecurity.com\/blog\/camoleak-critical-github-copilot-vulnerability-leaks-private-source-code\" target=\"_blank\" rel=\"\" title=\"https:\/\/www.legitsecurity.com\/blog\/camoleak-critical-github-copilot-vulnerability-leaks-private-source-code\">security hole in Microsoft\u2019s Copilot chatbot<\/a>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u201cIt\u2019s like having a spy in your ranks,\u201d he said. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Former military officials say that, with greater reliance on chatbots and hackers backed by China, Russia and other nations already instructing <a href=\"https:\/\/services.google.com\/fh\/files\/misc\/advances-in-threat-actor-usage-of-ai-tools-en.pdf\" target=\"_blank\" rel=\"\" title=\"https:\/\/services.google.com\/fh\/files\/misc\/advances-in-threat-actor-usage-of-ai-tools-en.pdf\">Google\u2019s Gemini<\/a>, <a href=\"https:\/\/openai.com\/index\/disrupting-malicious-uses-of-ai-by-state-affiliated-threat-actors\/\" target=\"_blank\" rel=\"\" title=\"https:\/\/openai.com\/index\/disrupting-malicious-uses-of-ai-by-state-affiliated-threat-actors\/\">OpenAI\u2019s ChatGPT<\/a> and <a href=\"https:\/\/www.microsoft.com\/en-us\/security\/blog\/2024\/02\/14\/staying-ahead-of-threat-actors-in-the-age-of-ai\/\" rel=\"\">Copilot<\/a> to create malware and fake personas, a prompt injection that orders the bots themselves to copy files or spread lies looms near.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Microsoft\u2019s <a href=\"https:\/\/www.microsoft.com\/en-us\/security\/security-insider\/threat-landscape\/microsoft-digital-defense-report-2025\" target=\"_blank\" rel=\"\" title=\"https:\/\/www.microsoft.com\/en-us\/security\/security-insider\/threat-landscape\/microsoft-digital-defense-report-2025\">annual digital defense report<\/a>, released last month, for the first time said, \u201cAI systems themselves have become high-value targets, with adversaries amping up use of methods like prompt injection.\u201d <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">What\u2019s more, the problem of <a href=\"https:\/\/versprite.com\/blog\/still-obedient-prompt-injection-in-llms-isnt-going-away-in-2025\/#:~:text=Conclusion,for%20all%20the%20wrong%20reasons.\" target=\"_blank\" rel=\"\" title=\"https:\/\/versprite.com\/blog\/still-obedient-prompt-injection-in-llms-isnt-going-away-in-2025\/#:~:text=Conclusion,for%20all%20the%20wrong%20reasons.\">prompt injection<\/a> has <a href=\"https:\/\/www.ibm.com\/think\/insights\/prevent-prompt-injection\" target=\"_blank\" rel=\"\" title=\"https:\/\/www.ibm.com\/think\/insights\/prevent-prompt-injection\">no<\/a> easy solution, <a href=\"https:\/\/x.com\/cryps1s\/status\/1981037851279278414\" target=\"_blank\" rel=\"\" title=\"https:\/\/x.com\/cryps1s\/status\/1981037851279278414\">OpenAI<\/a> and security researchers say. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">An attack simply involves hiding malicious instructions \u2014 sometimes in white or tiny text \u2014 in a chatbot or content that the chatbot reads, such as a blog post or PDF. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For example, a security researcher demonstrated a prompt injection attack against OpenAI\u2019s new AI-based browser, ChatGPT Atlas, in which the chatbot responded, <a href=\"https:\/\/x.com\/p1njc70r\/status\/1980701879987269866\" target=\"_blank\" rel=\"\" title=\"https:\/\/x.com\/p1njc70r\/status\/1980701879987269866\">\u201cTrust No AI,\u201d<\/a> when a user asked for an analysis of a Google Docs file about horses that concealed malicious commands. Also, last month, a researcher tipped Microsoft off to a prompt injection vulnerability in Copilot that may have allowed attackers to <a href=\"https:\/\/www.adamlogue.com\/microsoft-365-copilot-arbitrary-data-exfiltration-via-mermaid-diagrams-fixed\/\" target=\"_blank\" rel=\"\" title=\"https:\/\/www.adamlogue.com\/microsoft-365-copilot-arbitrary-data-exfiltration-via-mermaid-diagrams-fixed\/\">trick the chatbot into stealing sensitive data<\/a>, including emails. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In an emailed statement, Microsoft said its security team continuously tries hacking Copilot to find any prompt injection vulnerabilities, blocks users who try to exploit any found and monitors for abnormal chatbot behavior, among other tactics. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u201cMicrosoft ensures its generative AI systems remain resilient against evolving threats for all our customers, including defense and national security,\u201d the statement said. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Responding publicly to criticism on X, <a href=\"https:\/\/x.com\/cryps1s\/status\/1981037851279278414\" target=\"_blank\" rel=\"\" title=\"https:\/\/x.com\/cryps1s\/status\/1981037851279278414\">Dane Stuckey, OpenAI\u2019s chief information security officer, wrote<\/a> that \u201cprompt injection remains a frontier, unsolved security problem, and our adversaries will spend significant time and resources to find ways to make ChatGPT agent fall for these attacks.\u201d<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Along the same lines, Caspi said, \u201cYou cannot prevent the prompt injection [fully], but you need to limit the impact.\u201d He advised that organizations limit an AI assistant\u2019s access to sensitive data and limit the user\u2019s access to other organizational data.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For instance, the Army has awarded contracts <a href=\"https:\/\/www.usaspending.gov\/search?hash=3979bd67b427c3c8dfd88e6832c8fcca\" target=\"_blank\" rel=\"\" title=\"https:\/\/www.usaspending.gov\/search?hash=3979bd67b427c3c8dfd88e6832c8fcca\">worth at least $11 million<\/a> to deploy <a href=\"https:\/\/www.army.mil\/article\/285537\/army_launches_army_enterprise_llm_workspace_the_revolutionary_ai_platform_that_wrote_this_article\" target=\"_blank\" rel=\"\" title=\"https:\/\/www.army.mil\/article\/285537\/army_launches_army_enterprise_llm_workspace_the_revolutionary_ai_platform_that_wrote_this_article\">Ask Sage<\/a>, a tool that lets users restrict which Army data Microsoft Azure OpenAI, Gemini and other AI models can access to run queries and tasks. Ask Sage also <a href=\"https:\/\/docs.asksage.ai\/docs\/faq\/faq.html\" target=\"_blank\" rel=\"\" title=\"https:\/\/docs.asksage.ai\/docs\/faq\/faq.html\">isolates Army data<\/a> from user prompts and external data sources.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Caspi, who is not an Army contractor, likened a prompt injection attack against an organization running Ask Sage to a lockdown situation where \u201cyou\u2019ve got this insider, but it\u2019s sitting in one room, and it can\u2019t leave the room or carry out sensitive information.\u201d <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Andre Slonopas, a Virginia Army National Guard member and former Army cyber and information operations officer, uses Ask Sage and voiced confidence in the Army\u2019s defensive AI tools, if not those of nuclear power plants or manufacturing entities, largely in rural, poorer areas. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The <a href=\"https:\/\/www.armyupress.army.mil\/Journals\/Military-Review\/English-Edition-Archives\/March-April-2025\/AI-Cyber-Information-Operations-Integration\/\" target=\"_blank\" rel=\"\" title=\"https:\/\/www.armyupress.army.mil\/Journals\/Military-Review\/English-Edition-Archives\/March-April-2025\/AI-Cyber-Information-Operations-Integration\/\">Virginia National Guard joined<\/a> with <a href=\"https:\/\/va.ng.mil\/Army-Guard\/91st-Cyber\/#:~:text=Cyber%20Fortress%202025%20Public%20Notice,efforts%20in%20enhancing%20cybersecurity%20measures.\" target=\"_blank\" rel=\"\" title=\"https:\/\/va.ng.mil\/Army-Guard\/91st-Cyber\/#:~:text=Cyber%20Fortress%202025%20Public%20Notice,efforts%20in%20enhancing%20cybersecurity%20measures.\">essential services<\/a>, such as power utilities, to help defend their networks against AI-powered cyberattacks, as part of a September simulation, given that service disruptions can jeopardize military preparations.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Typically, an adversary encrypts its network traffic to evade detection, but, for the sake of an experiment, organizers did not encrypt the AI offender\u2019s traffic because \u201cwe wanted the blue team [of humans] to see exactly what the AI was doing,\u201d Slonopas said.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u201cThe blue team was absolutely defeated,\u201d despite being able to watch the AI scanning its networks, creating fake usernames to gain unauthorized access and executing instructions to defeat the team\u2019s systems.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u201cWhether the AI is doing prompt injection, spoofing or maybe even some sort of a brute force attack, the speed of AI is so unbelievably immense that simply human beings cannot counter it,\u201d and, therefore, \u201cyou have to make cybersecurity AI more accessible and more affordable,\u201d Slonopas said. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u201cIf a water utility has to pay, say, $30,000 for a defensive AI license, well, it will amplify one person to be like 40\u2033 or dozens of personnel, he said. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In response to questions, Army Cyber Command spokesperson Kyle Alvarez said in an emailed statement, \u201cDue to the current lapse in appropriations, ARCYBER was unable to accept or respond to any media engagements or requests.\u201d<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Army contractors, too, are under attack from state-affiliated AI. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u201cChina is using offensive AI like nobody else,\u201d said Nicolas Chaillan, the founder of Ask Sage and a former U.S. Air Force and Space Force chief software officer.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u201cWe see so many attacks coming after us,\u201d all of which the company has stopped, Chaillan added.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A military official, who spoke on condition of anonymity due to the geopolitical sensitivity of the matter, said that China does \u201cappear\u201d to be the most skilled in offensive AI. However, the official added, AI spoofing and translation allow the United States, China, Iran, other countries, hacktivists and financial cybercriminals to masquerade as one another.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For example, the official said, \u201cRight now, with ChatGPT, I can program in Chinese. I don\u2019t speak Chinese, but because of the ChatGPT capabilities that I have, I can do that.\u201d<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><i>Aliya Sternstein, J.D., is an investigative journalist who has covered technology, cognition, and national security since Napster shut down, working for various outlets including Atlantic Media, Christian Science Monitor, Daily Beast, Forbes Magazine and Just Security. She is also a research analyst at Georgetown Law.<\/i><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Current and former military officers are warning that countries are likely to exploit a security hole in artificial intelligence chatbots.<\/p>\n","protected":false},"author":7,"featured_media":120188,"comment_status":"open","ping_status":"open","sticky":false,"template":"single-post-featured-layout","format":"standard","meta":{"_acf_changed":false,"_yoast_wpseo_meta-robots-noindex":"","_yoast_wpseo_meta-robots-nofollow":"","_yoast_wpseo_canonical":"","_acf":"","_yoast_wpseo_primary_category":14,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","_smg_distribution_targets":{"4":{"categories":["your-air-force","daily-news-roundup","news"],"primary_category":"your-air-force"},"5":{"categories":["your-army","daily-news-roundup","newsletters","news"],"primary_category":"your-army"},"6":{"categories":["your-marine-corps","daily-news-roundup","news"],"primary_category":"your-marine-corps"},"7":{"categories":["your-navy","daily-news-roundup","news"],"primary_category":"your-navy"},"9":{"categories":["cyber","daily-brief","newsletters"],"primary_category":"cyber"}}},"categories":[78,160,29,14,36],"tags":[],"coauthors":[3494],"class_list":["post-71656","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ausa-digital-show-dailies","category-daily-news-roundup","category-digital-show-dailies","category-land","category-newsletters"],"acf":{"subheadline":"","legacy_arc_id":"4LLBQJ4AFJCANMJC7DATAHGRUM","arc_canonical_url":"\/land\/2025\/11\/10\/military-experts-warn-security-hole-in-most-ai-chatbots-can-sow-chaos\/","remove_feature_photo":false,"is_sponsored":false,"subtype":"featured-layout","redirect_url":"","disable_inline_ads":false,"native_logo_pretext":"Presented By:"},"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v26.0 (Yoast SEO v28.1) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>Military experts warn security hole in most AI chatbots can sow chaos - Defense News<\/title>\n<meta name=\"description\" content=\"Current and former military officers are warning that countries are likely to exploit a security hole in artificial intelligence chatbots.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/one.sightlinemg.com\/defensenews\/land\/2025\/11\/10\/military-experts-warn-security-hole-in-most-ai-chatbots-can-sow-chaos\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Military experts warn security hole in most AI chatbots can sow chaos\" \/>\n<meta property=\"og:description\" content=\"Current and former military officers are warning that countries are likely to exploit a security hole in artificial intelligence chatbots.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/one.sightlinemg.com\/defensenews\/land\/2025\/11\/10\/military-experts-warn-security-hole-in-most-ai-chatbots-can-sow-chaos\/\" \/>\n<meta property=\"og:site_name\" content=\"Defense News\" \/>\n<meta property=\"article:published_time\" content=\"2025-11-10T21:50:50+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-08-08T01:25:25+00:00\" \/>\n<meta name=\"author\" content=\"Aliya Sternstein\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Aliya Sternstein\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\n\t    \"@context\": \"https:\\\/\\\/schema.org\",\n\t    \"@graph\": [\n\t        {\n\t            \"@type\": \"Article\",\n\t            \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/defensenews\\\/land\\\/2025\\\/11\\\/10\\\/military-experts-warn-security-hole-in-most-ai-chatbots-can-sow-chaos\\\/#article\",\n\t            \"isPartOf\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/defensenews\\\/land\\\/2025\\\/11\\\/10\\\/military-experts-warn-security-hole-in-most-ai-chatbots-can-sow-chaos\\\/\"\n\t            },\n\t            \"author\": {\n\t                \"name\": \"migration\",\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/defensenews\\\/#\\\/schema\\\/person\\\/cc76c831bb37a926738c8391fca7a3b1\"\n\t            },\n\t            \"headline\": \"Military experts warn security hole in most AI chatbots can sow chaos\",\n\t            \"datePublished\": \"2025-11-10T21:50:50+00:00\",\n\t            \"dateModified\": \"2026-08-08T01:25:25+00:00\",\n\t            \"mainEntityOfPage\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/defensenews\\\/land\\\/2025\\\/11\\\/10\\\/military-experts-warn-security-hole-in-most-ai-chatbots-can-sow-chaos\\\/\"\n\t            },\n\t            \"wordCount\": 1074,\n\t            \"commentCount\": 0,\n\t            \"publisher\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/defensenews\\\/#organization\"\n\t            },\n\t            \"image\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/defensenews\\\/land\\\/2025\\\/11\\\/10\\\/military-experts-warn-security-hole-in-most-ai-chatbots-can-sow-chaos\\\/#primaryimage\"\n\t            },\n\t            \"thumbnailUrl\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/GettyImages-1323133495.jpg.jpg\",\n\t            \"articleSection\": [\n\t                \"AUSA\",\n\t                \"Daily News Roundup\",\n\t                \"Digital Show Dailies\",\n\t                \"Land\",\n\t                \"Newsletters\"\n\t            ],\n\t            \"inLanguage\": \"en-US\",\n\t            \"potentialAction\": [\n\t                {\n\t                    \"@type\": \"CommentAction\",\n\t                    \"name\": \"Comment\",\n\t                    \"target\": [\n\t                        \"https:\\\/\\\/one.sightlinemg.com\\\/defensenews\\\/land\\\/2025\\\/11\\\/10\\\/military-experts-warn-security-hole-in-most-ai-chatbots-can-sow-chaos\\\/#respond\"\n\t                    ]\n\t                }\n\t            ]\n\t        },\n\t        {\n\t            \"@type\": \"WebPage\",\n\t            \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/defensenews\\\/land\\\/2025\\\/11\\\/10\\\/military-experts-warn-security-hole-in-most-ai-chatbots-can-sow-chaos\\\/\",\n\t            \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/defensenews\\\/land\\\/2025\\\/11\\\/10\\\/military-experts-warn-security-hole-in-most-ai-chatbots-can-sow-chaos\\\/\",\n\t            \"name\": \"Military experts warn security hole in most AI chatbots can sow chaos - Defense News\",\n\t            \"isPartOf\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/defensenews\\\/#website\"\n\t            },\n\t            \"primaryImageOfPage\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/defensenews\\\/land\\\/2025\\\/11\\\/10\\\/military-experts-warn-security-hole-in-most-ai-chatbots-can-sow-chaos\\\/#primaryimage\"\n\t            },\n\t            \"image\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/defensenews\\\/land\\\/2025\\\/11\\\/10\\\/military-experts-warn-security-hole-in-most-ai-chatbots-can-sow-chaos\\\/#primaryimage\"\n\t            },\n\t            \"thumbnailUrl\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/GettyImages-1323133495.jpg.jpg\",\n\t            \"datePublished\": \"2025-11-10T21:50:50+00:00\",\n\t            \"dateModified\": \"2026-08-08T01:25:25+00:00\",\n\t            \"description\": \"Current and former military officers are warning that countries are likely to exploit a security hole in artificial intelligence chatbots.\",\n\t            \"breadcrumb\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/defensenews\\\/land\\\/2025\\\/11\\\/10\\\/military-experts-warn-security-hole-in-most-ai-chatbots-can-sow-chaos\\\/#breadcrumb\"\n\t            },\n\t            \"inLanguage\": \"en-US\",\n\t            \"potentialAction\": [\n\t                {\n\t                    \"@type\": \"ReadAction\",\n\t                    \"target\": [\n\t                        \"https:\\\/\\\/one.sightlinemg.com\\\/defensenews\\\/land\\\/2025\\\/11\\\/10\\\/military-experts-warn-security-hole-in-most-ai-chatbots-can-sow-chaos\\\/\"\n\t                    ]\n\t                }\n\t            ]\n\t        },\n\t        {\n\t            \"@type\": \"ImageObject\",\n\t            \"inLanguage\": \"en-US\",\n\t            \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/defensenews\\\/land\\\/2025\\\/11\\\/10\\\/military-experts-warn-security-hole-in-most-ai-chatbots-can-sow-chaos\\\/#primaryimage\",\n\t            \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/GettyImages-1323133495.jpg.jpg\",\n\t            \"contentUrl\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/GettyImages-1323133495.jpg.jpg\"\n\t        },\n\t        {\n\t            \"@type\": \"BreadcrumbList\",\n\t            \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/defensenews\\\/land\\\/2025\\\/11\\\/10\\\/military-experts-warn-security-hole-in-most-ai-chatbots-can-sow-chaos\\\/#breadcrumb\",\n\t            \"itemListElement\": [\n\t                {\n\t                    \"@type\": \"ListItem\",\n\t                    \"position\": 1,\n\t                    \"name\": \"Home\",\n\t                    \"item\": \"https:\\\/\\\/one.sightlinemg.com\\\/defensenews\\\/\",\n\t                    \"ad_zone\": \"home\"\n\t                },\n\t                {\n\t                    \"@type\": \"ListItem\",\n\t                    \"position\": 2,\n\t                    \"name\": \"Land\",\n\t                    \"item\": \"https:\\\/\\\/one.sightlinemg.com\\\/defensenews\\\/land\\\/\",\n\t                    \"ad_zone\": \"land\"\n\t                },\n\t                {\n\t                    \"@type\": \"ListItem\",\n\t                    \"position\": 3,\n\t                    \"name\": \"Military experts warn security hole in most AI chatbots can sow chaos\"\n\t                }\n\t            ]\n\t        },\n\t        {\n\t            \"@type\": \"WebSite\",\n\t            \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/defensenews\\\/#website\",\n\t            \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/defensenews\\\/\",\n\t            \"name\": \"Defense News\",\n\t            \"description\": \"Covering the politics, business and technology of defense | Defense News\",\n\t            \"publisher\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/defensenews\\\/#organization\"\n\t            },\n\t            \"potentialAction\": [\n\t                {\n\t                    \"@type\": \"SearchAction\",\n\t                    \"target\": {\n\t                        \"@type\": \"EntryPoint\",\n\t                        \"urlTemplate\": \"https:\\\/\\\/one.sightlinemg.com\\\/defensenews\\\/?s={search_term_string}\"\n\t                    },\n\t                    \"query-input\": {\n\t                        \"@type\": \"PropertyValueSpecification\",\n\t                        \"valueRequired\": true,\n\t                        \"valueName\": \"search_term_string\"\n\t                    }\n\t                }\n\t            ],\n\t            \"inLanguage\": \"en-US\"\n\t        },\n\t        {\n\t            \"@type\": \"Organization\",\n\t            \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/defensenews\\\/#organization\",\n\t            \"name\": \"Defense News\",\n\t            \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/defensenews\\\/\",\n\t            \"logo\": {\n\t                \"@type\": \"ImageObject\",\n\t                \"inLanguage\": \"en-US\",\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/defensenews\\\/#\\\/schema\\\/logo\\\/image\\\/\",\n\t                \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/defensenews-logo-white.png\",\n\t                \"contentUrl\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/defensenews-logo-white.png\",\n\t                \"caption\": \"Defense News\"\n\t            },\n\t            \"image\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/defensenews\\\/#\\\/schema\\\/logo\\\/image\\\/\"\n\t            }\n\t        },\n\t        {\n\t            \"@type\": \"Person\",\n\t            \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/defensenews\\\/#\\\/schema\\\/person\\\/cc76c831bb37a926738c8391fca7a3b1\",\n\t            \"name\": \"migration\",\n\t            \"image\": {\n\t                \"@type\": \"ImageObject\",\n\t                \"inLanguage\": \"en-US\",\n\t                \"@id\": \"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=gcf4cb6ee0ec29e49e7a963234e4340ec\",\n\t                \"url\": \"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=g\",\n\t                \"contentUrl\": \"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=g\",\n\t                \"caption\": \"migration\"\n\t            },\n\t            \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/defensenews\\\/author\\\/migration\\\/\"\n\t        }\n\t    ]\n\t}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Military experts warn security hole in most AI chatbots can sow chaos - Defense News","description":"Current and former military officers are warning that countries are likely to exploit a security hole in artificial intelligence chatbots.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/one.sightlinemg.com\/defensenews\/land\/2025\/11\/10\/military-experts-warn-security-hole-in-most-ai-chatbots-can-sow-chaos\/","og_locale":"en_US","og_type":"article","og_title":"Military experts warn security hole in most AI chatbots can sow chaos","og_description":"Current and former military officers are warning that countries are likely to exploit a security hole in artificial intelligence chatbots.","og_url":"https:\/\/one.sightlinemg.com\/defensenews\/land\/2025\/11\/10\/military-experts-warn-security-hole-in-most-ai-chatbots-can-sow-chaos\/","og_site_name":"Defense News","article_published_time":"2025-11-10T21:50:50+00:00","article_modified_time":"2026-08-08T01:25:25+00:00","author":"Aliya Sternstein","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Aliya Sternstein","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/one.sightlinemg.com\/defensenews\/land\/2025\/11\/10\/military-experts-warn-security-hole-in-most-ai-chatbots-can-sow-chaos\/#article","isPartOf":{"@id":"https:\/\/one.sightlinemg.com\/defensenews\/land\/2025\/11\/10\/military-experts-warn-security-hole-in-most-ai-chatbots-can-sow-chaos\/"},"author":{"name":"migration","@id":"https:\/\/one.sightlinemg.com\/defensenews\/#\/schema\/person\/cc76c831bb37a926738c8391fca7a3b1"},"headline":"Military experts warn security hole in most AI chatbots can sow chaos","datePublished":"2025-11-10T21:50:50+00:00","dateModified":"2026-08-08T01:25:25+00:00","mainEntityOfPage":{"@id":"https:\/\/one.sightlinemg.com\/defensenews\/land\/2025\/11\/10\/military-experts-warn-security-hole-in-most-ai-chatbots-can-sow-chaos\/"},"wordCount":1074,"commentCount":0,"publisher":{"@id":"https:\/\/one.sightlinemg.com\/defensenews\/#organization"},"image":{"@id":"https:\/\/one.sightlinemg.com\/defensenews\/land\/2025\/11\/10\/military-experts-warn-security-hole-in-most-ai-chatbots-can-sow-chaos\/#primaryimage"},"thumbnailUrl":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/GettyImages-1323133495.jpg.jpg","articleSection":["AUSA","Daily News Roundup","Digital Show Dailies","Land","Newsletters"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/one.sightlinemg.com\/defensenews\/land\/2025\/11\/10\/military-experts-warn-security-hole-in-most-ai-chatbots-can-sow-chaos\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/one.sightlinemg.com\/defensenews\/land\/2025\/11\/10\/military-experts-warn-security-hole-in-most-ai-chatbots-can-sow-chaos\/","url":"https:\/\/one.sightlinemg.com\/defensenews\/land\/2025\/11\/10\/military-experts-warn-security-hole-in-most-ai-chatbots-can-sow-chaos\/","name":"Military experts warn security hole in most AI chatbots can sow chaos - Defense News","isPartOf":{"@id":"https:\/\/one.sightlinemg.com\/defensenews\/#website"},"primaryImageOfPage":{"@id":"https:\/\/one.sightlinemg.com\/defensenews\/land\/2025\/11\/10\/military-experts-warn-security-hole-in-most-ai-chatbots-can-sow-chaos\/#primaryimage"},"image":{"@id":"https:\/\/one.sightlinemg.com\/defensenews\/land\/2025\/11\/10\/military-experts-warn-security-hole-in-most-ai-chatbots-can-sow-chaos\/#primaryimage"},"thumbnailUrl":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/GettyImages-1323133495.jpg.jpg","datePublished":"2025-11-10T21:50:50+00:00","dateModified":"2026-08-08T01:25:25+00:00","description":"Current and former military officers are warning that countries are likely to exploit a security hole in artificial intelligence chatbots.","breadcrumb":{"@id":"https:\/\/one.sightlinemg.com\/defensenews\/land\/2025\/11\/10\/military-experts-warn-security-hole-in-most-ai-chatbots-can-sow-chaos\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/one.sightlinemg.com\/defensenews\/land\/2025\/11\/10\/military-experts-warn-security-hole-in-most-ai-chatbots-can-sow-chaos\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/one.sightlinemg.com\/defensenews\/land\/2025\/11\/10\/military-experts-warn-security-hole-in-most-ai-chatbots-can-sow-chaos\/#primaryimage","url":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/GettyImages-1323133495.jpg.jpg","contentUrl":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/GettyImages-1323133495.jpg.jpg"},{"@type":"BreadcrumbList","@id":"https:\/\/one.sightlinemg.com\/defensenews\/land\/2025\/11\/10\/military-experts-warn-security-hole-in-most-ai-chatbots-can-sow-chaos\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/one.sightlinemg.com\/defensenews\/","ad_zone":"home"},{"@type":"ListItem","position":2,"name":"Land","item":"https:\/\/one.sightlinemg.com\/defensenews\/land\/","ad_zone":"land"},{"@type":"ListItem","position":3,"name":"Military experts warn security hole in most AI chatbots can sow chaos"}]},{"@type":"WebSite","@id":"https:\/\/one.sightlinemg.com\/defensenews\/#website","url":"https:\/\/one.sightlinemg.com\/defensenews\/","name":"Defense News","description":"Covering the politics, business and technology of defense | Defense News","publisher":{"@id":"https:\/\/one.sightlinemg.com\/defensenews\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/one.sightlinemg.com\/defensenews\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/one.sightlinemg.com\/defensenews\/#organization","name":"Defense News","url":"https:\/\/one.sightlinemg.com\/defensenews\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/one.sightlinemg.com\/defensenews\/#\/schema\/logo\/image\/","url":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/06\/defensenews-logo-white.png","contentUrl":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/06\/defensenews-logo-white.png","caption":"Defense News"},"image":{"@id":"https:\/\/one.sightlinemg.com\/defensenews\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/one.sightlinemg.com\/defensenews\/#\/schema\/person\/cc76c831bb37a926738c8391fca7a3b1","name":"migration","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=gcf4cb6ee0ec29e49e7a963234e4340ec","url":"https:\/\/secure.gravatar.com\/avatar\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=g","caption":"migration"},"url":"https:\/\/one.sightlinemg.com\/defensenews\/author\/migration\/"}]}},"jetpack_featured_media_url":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/GettyImages-1323133495.jpg.jpg","jetpack_sharing_enabled":true,"distributor_meta":false,"distributor_terms":false,"distributor_media":false,"distributor_original_site_name":"Defense News","distributor_original_site_url":"https:\/\/one.sightlinemg.com\/defensenews","push-errors":false,"_links":{"self":[{"href":"https:\/\/one.sightlinemg.com\/defensenews\/wp-json\/wp\/v2\/posts\/71656","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/one.sightlinemg.com\/defensenews\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/one.sightlinemg.com\/defensenews\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/one.sightlinemg.com\/defensenews\/wp-json\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"https:\/\/one.sightlinemg.com\/defensenews\/wp-json\/wp\/v2\/comments?post=71656"}],"version-history":[{"count":1,"href":"https:\/\/one.sightlinemg.com\/defensenews\/wp-json\/wp\/v2\/posts\/71656\/revisions"}],"predecessor-version":[{"id":71660,"href":"https:\/\/one.sightlinemg.com\/defensenews\/wp-json\/wp\/v2\/posts\/71656\/revisions\/71660"}],"wp:attachment":[{"href":"https:\/\/one.sightlinemg.com\/defensenews\/wp-json\/wp\/v2\/media?parent=71656"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/one.sightlinemg.com\/defensenews\/wp-json\/wp\/v2\/categories?post=71656"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/one.sightlinemg.com\/defensenews\/wp-json\/wp\/v2\/tags?post=71656"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/one.sightlinemg.com\/defensenews\/wp-json\/wp\/v2\/coauthors?post=71656"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}