PuzzleMask: Abusing Plain Prose as a Covert AI Attack Vector
https://research.checkpoint.com/2026/puzzlemask-abusing-plain-prose-as-a-covert-ai-attack-vector/
Plain prose as executable. Every input sentence is now turing-complete. Treat all untrusted text as instruction until structure proves otherwise. The prompt was always the attack surface.