New #attack on #ChatGPT research agent pilfers secrets from #Gmail #inboxes
The face-palm-worthy #prompt injections against #AI assistants continue. Today’s installment hits #OpenAI ’s #DeepResearch agent. Researchers recently devised an attack that plucked #confidential information out of a user’s Gmail inbox and sent it to an attacker-controlled web server, with no interaction required on the part of the victim and no sign of exfiltration.
#privacy #promptinjection



