'AI security controls are only as strong as the wider application environment around them': OpenAI forced to patch after experts bypass ChatGPT 'lockdown mode' to gain access to entire chat history
- Researchers bypassed ChatGPT Lockdown Mode, showing prompt-injection attacks could evade built-in protections
- The flaw enabled sandbox escapes that could support data theft, phishing, malware delivery, or malicious popups
- OpenAI patched the issue server-side, highlighting risks in AI application layers beyond the model itself
OpenAI was recently forced to upgrade ChatGPT's 'Lockdown Mode' after researchers found a way to bypass the security protection and pull off different cyberattacks through the tool.
When analyzing Lockdown Mode, security researchers Check Point Research (CPR) found a way to bypass the protections and still end up pulling sensitive data. They’re saying it was also possible to deploy malware this way, too.
“The finding raises a broader enterprise security issue: AI security controls are only as strong as the wider application environment around them,” CPR warned.
Lockdown mode
One of the most common ways AI tools and agents are abused is called “prompt injection”. By injecting...
Copyright of this story solely belongs to www.techradar.com. To see the full text click HERE
