Artificial Intelligence Hackers Use ChatGPT Custom GPTs in ClickFix Attacks The personalized versions of ChatGPT were used to impersonate legitimate products and trick users into executing PowerShell commands. Ionut ArghireSeptember 29, 2026
Artificial Intelligence AI-Built Exploit and Sign-In Flaw Opened Path to Internal OpenAI Code Hacktron researchers earned a bug bounty after demonstrating access to OpenAI employee accounts. Eduard KovacsSeptember 18, 2026
Artificial Intelligence OpenAI Fixes ChatGPT Agent Flaw That Could Let Attackers Forge an AI Insider AgentForger allows an attacker to create, insert and remotely control an invisible autonomous AI agent inside a victim organization. Kevin TownsendJuly 23, 2026
Artificial Intelligence OpenAI Rolls Out Advanced Security for ChatGPT Accounts Advanced Account Security provides stronger login methods, more secure account recovery, shorter sessions, and training exclusion. Eduard KovacsMay 4, 2026
Artificial Intelligence Chrome, Edge Extensions Caught Stealing ChatGPT Sessions Marketed as ChatGPT enhancement and productivity tools, the extensions allow the threat actor to access the victim's ChatGPT data. Ionut ArghireJanuary 27, 2026
Artificial Intelligence ‘ZombieAgent’ Attack Let Researchers Take Over ChatGPT Radware bypassed ChatGPT’s protections to exfiltrate user data and implant a persistent logic into the agent’s long-term memory. Ionut ArghireJanuary 9, 2026
Artificial Intelligence ChatGPT Vulnerability Exposed Underlying Cloud Infrastructure A researcher found a way to exploit an SSRF vulnerability related to custom GPTs to obtain an Azure access token. Eduard KovacsNovember 13, 2025
Artificial Intelligence Researchers Hack ChatGPT Memories and Web Search Features Tenable researchers discovered seven vulnerabilities, including ones affecting the latest GPT model. Eduard KovacsNovember 6, 2025
Artificial Intelligence OpenAI Atlas Omnibox Is Vulnerable to Jailbreaks Researchers have discovered that a prompt can be disguised as an url, and accepted by Atlas as an url in the omnibox. Kevin TownsendOctober 25, 2025
Artificial Intelligence ChatGPT Tricked Into Solving CAPTCHAs The AI agent was able to solve different types of CAPTCHAs and adjusted its cursor movements to better mimic human behavior. Ionut ArghireSeptember 19, 2025
Artificial Intelligence ChatGPT Targeted in Server-Side Data Theft Attack OpenAI has fixed this zero-click attack method called ShadowLeak by researchers. Eduard KovacsSeptember 18, 2025
Artificial Intelligence ChatGPT’s Calendar Integration Can Be Exploited to Steal Emails Researchers show how a crafted calendar invite can trigger ChatGPT to exfiltrate sensitive emails. Eduard KovacsSeptember 16, 2025
Artificial Intelligence GPT-5 Has a Vulnerability: Its Router Can Send You to Older, Less Safe Models Instead of GPT-5 Pro, your query could be quietly redirected to an older, weaker model, opening the door to jailbreaks, hallucinations, and unsafe outputs. Kevin TownsendAugust 20, 2025
Artificial Intelligence Red Teams Jailbreak GPT-5 With Ease, Warn It’s ‘Nearly Unusable’ for Enterprise Researchers demonstrate how multi-turn “storytelling” attacks bypass prompt-level filters, exposing systemic weaknesses in GPT-5’s defenses. Kevin TownsendAugust 8, 2025
Artificial Intelligence Major Enterprise AI Assistants Can Be Abused for Data Theft, Manipulation Zenity has shown how AI assistants such as ChatGPT, Copilot, Cursor, Gemini, and Salesforce Einstein can be abused using specially crafted prompts. Eduard KovacsAugust 6, 2025
Artificial Intelligence Browser Extensions Pose Serious Threat to Gen-AI Tools Handling Sensitive Data LayerX has disclosed an AI chatbot hacking method via web browser extensions it has named ‘man-in-the-prompt’. Eduard KovacsJuly 31, 2025
Artificial Intelligence OpenAI Offering $100K Bounties for Critical Vulnerabilities OpenAI has raised its maximum bug bounty payout to $100,000 (up from $20,000) for high-impact flaws in its infrastructure and products. Ryan NaraineMarch 26, 2025
Artificial Intelligence ChatGPT Tool Vulnerability Exploited Against US Government Organizations A year-old vulnerability in a third-party ChatGPT tool is being exploited against financial entities and US government organizations. Ionut ArghireMarch 18, 2025
Artificial Intelligence OpenAI Bans ChatGPT Accounts Used by Chinese Group for Spy Tools OpenAI has banned ChatGPT accounts used by Chinese threat actors, including ones leveraged for the development of spying tools. Eduard KovacsFebruary 24, 2025
Artificial Intelligence DeepSeek Compared to ChatGPT, Gemini in AI Jailbreak Test DeepSeek’s susceptibility to jailbreaks has been compared by Cisco to other popular AI models, including from Meta, OpenAI and Google. Eduard KovacsFebruary 4, 2025