Prompt injection leaks Bing Chat's codename Sydney and its system instructions
Prompt injection leaked Bing Chat's internal codename Sydney and its system instructions
Why it matters
Publicly demonstrated that in a live service the system prompt does not work as a line of defense
Source — Primary sources first; secondary reports are labelled “Press”
Pressmspoweruser.comhttps://mspoweruser.com/chatgpt-powered-bing-discloses-original-directives-after-prompt-injection-attack-latest-microsoft-news/Added in Week 35, 2026 · See that week