New attack on ChatGPT research agent pilfers secrets from Gmail inboxes
The face-palm-worthy prompt injections against AI assistants continue. Today’s installment hits OpenAI’s Deep Research agent. Researchers recently devised an attack that plucked confidential information out of a user’s Gmail inbox and sent it to an attacker-controlled web server, with no interaction required on the part of the victim and no sign of exfiltration. Deep Research is a ChatGPT-integrated AI agent that OpenAI introduced earlier this year. As its name is…