ChatGPT Lockdown Mode Bypass Reveals a Wider Challenge in AI Security

Check Point Research discovered a vulnerability that bypassed ChatGPT Lockdown Mode, the security feature OpenAI designed to limit prompt-injection-driven data exfiltration, enabling silent chat data theft, phishing, malware delivery and zero-click data exfiltration in the ChatGPT desktop application. OpenAI fixed the flaw after responsible disclosure, but Check Point Research said the finding shows AI security controls are only as strong as the wider application environment around them.

Check Point Research CPR discovered a vulnerability that bypassed ChatGPT Lockdown Mode, a security feature designed to reduce prompt-injection-driven data exfiltration. The flaw could enable silent chat data theft, phishing and malware delivery, including zero-click data exfiltration in the ChatGPT desktop application. OpenAI fixed the vulnerability following responsible disclosure, but the finding raises a broader enterprise security issue: AI security controls are only as strong as the wider application environment around them. Key Findings Check Point Research bypassed ChatGPT Lockdown Mode, a security feature specifically designed to limit prompt-injection-driven data exfiltration. The vulnerability could enable multiple attack scenarios, including chat … The post ChatGPT Lockdown Mode Bypass Reveals a Wider Challenge in AI Security https://blog.checkpoint.com/security/chatgpt-lockdown-mode-bypass-reveals-a-wider-challenge-in-ai-security/ appeared first on Check Point Blog https://blog.checkpoint.com .