ChatGPT Lockdown Mode Bypass: AI Security Risks | Check Point

Check Point Research (CPR) discovered a vulnerability that bypassed ChatGPT Lockdown Mode, a security feature designed to reduce prompt-injection-driven data exfiltration. The flaw could enable silent chat data theft, phishing and malware delivery, including zero-click data exfiltration in the ChatGPT desktop application.

OpenAI fixed the vulnerability following responsible disclosure, but the finding raises a broader enterprise security issue: AI security controls are only as strong as the wider application environment around them.

Key Findings

• Check Point Research bypassed ChatGPT Lockdown Mode, a security feature specifically designed to limit prompt-injection-driven data exfiltration.
• The vulnerability could enable multiple attack scenarios, including chat data exfiltration, credential phishing and malware delivery through a trusted ChatGPT interface.
• The most significant risk demonstrated is the potential for data exfiltration without user interaction, regardless of how ChatGPT is accessed. While CPR used the desktop application in its demonstration, the underlying technique is not limited to the desktop...

Copyright of this story solely belongs to www.itvoice.in. To see the full text click HERE