LIVE FEED
FIRST LOOK Anthropic Claude Launches Automated Attack Surface Reduction for Code // FIRST LOOK Anthropic Proposes AI Safety Bill with Model Block Powers // HIGH Rogue AI Agents Read Indian Org Data via Exposed Credentials // FIRST LOOK Microsoft Launches Guardian Agents to Monitor AI Agent Behaviour // FIRST LOOK NVIDIA Launches Nemotron 3.5 Super VL and Bolt Agent Models // FIRST LOOK Laminar YC S24 Launches flow-1 for AI Agent Trace Analysis // HIGH OpenCode Console Breach Exposes API Keys, Fuels AI Distillation Attack // CRITICAL AI Agent Army Used to Breach John Deere and SharkNinja // FIRST LOOK OpenAI Decisions API Brings Typed AI Triage to SOC Platforms // FIRST LOOK OpenAI, Meta and Google AI Agents Blocked by Major Web Services //
COVERT-CHANNEL

Covert-Channel

3 reports
All LLM Security Agentic AI Industry News Research First Look: Security Supply Chain Prompt Injection Regulatory Adversarial ML Jailbreaks Model Theft Data Poisoning Deep Signal Intelligence Report Monthly Review AI Governance AI Security AI Security Tools Identity & Access Management Security Operations
ChatGPT Cross-Account Data Leakage via Sandbox Channel

ChatGPT Cross-Account Data Leakage via Sandbox Channel

ATLAS OWASP CRITICAL Active exploitation · Immediate action required ▲ 9.2 Check Point Research

Check Point Research uncovered a covert cross-account communication channel in ChatGPT's code-execution sandbox that allowed an attacker to hijack a victim's session and exfiltrate data from connected services such as Gmail. The attack exploited a shared internal package delivery service reachable by containers belonging to different user accounts, bypassing inter-container isolation. The channel could be triggered silently via malicious prompts, shared conversations, or custom GPTs without appearing in the victim's visible response.

ChatGPT Prompt Injection Exfiltrates Gmail Data via Hidden Channel

ChatGPT Prompt Injection Exfiltrates Gmail Data via Hidden Channel

ATLAS OWASP HIGH Significant risk · Prioritise patching ▲ 9.2 The Hacker News

Check Point Research demonstrated a prompt injection attack against ChatGPT that allowed a hidden instruction to silently read a victim's connected Gmail data and exfiltrate it to an attacker-controlled account through an internal inter-container service. The attack exploited ChatGPT's agentic tool-use defaults, which permit reading connected apps without user confirmation under the 'Important actions' permission model. OpenAI has since taken the internal service used as the covert channel offline, but the underlying permission design and injection vectors remain a structural concern.

ChatGPT Code Runtime Exfiltrates Data via Prompt Injection

ChatGPT Code Runtime Exfiltrates Data via Prompt Injection

ATLAS OWASP CRITICAL Active exploitation · Immediate action required ▲ 9.2 Check Point Research

Check Point Research disclosed a critical vulnerability in ChatGPT's code execution runtime that allows a single malicious prompt to establish a covert outbound exfiltration channel, bypassing OpenAI's stated network isolation safeguards. Sensitive user data — including uploaded files, conversation content, and personal documents — could be silently transmitted to attacker-controlled servers without user knowledge or consent. The same channel was also found capable of enabling remote shell access within the Linux execution environment.

◉ AI THREAT BRIEFING

Stay ahead of the threat.

Twice-weekly digest of critical AI security developments — every story mapped to MITRE ATLAS and OWASP LLM Top 10. Free.

No spam. Unsubscribe anytime.