P. Reddy and A. S. Gujral, “EchoLeak: The First Real-World Zero-Click Prompt Injection Exploit in a Production LLM System”, AAAI-SS, vol. 7, no. 1, pp. 303–311, Nov. 2025.