Prompt Injection Defense Weekly2026/05/18 01:41:36Prompt injection → shell: block CVE-2026-26030 with output validation and tool allowlistingMicrosoft's May 2026 disclosure of CVE-2026-26030 showed how a prompt injection chains into full Windows RCE via Semantic Kernel. Here's a drop-in Python tool-allowlist snippet that blocks the attack chain before any executor runs.00