ChatGPT Lockdown Mode Bypass: Phishing, Malware Delivery, and Silent Data Exfiltration

Summary

Check Point Research reported a flaw in ChatGPT's code-execution runtime that let sensitive conversation data be silently exfiltrated to an attacker-controlled server via DNS tunneling, a hidden outbound channel that bypassed the runtime's network isolation. The source text provided is truncated, so further details of the Lockdown Mode bypass, including phishing and malware delivery, are not available here.

Mitigation

A fix for this issue was promptly deployed.

Related items

• InfoOpenAI built an AI pipeline to find, exploit and patch Linux flawsSame vendor · CSO Online
• InfoAI Agents Got Root on Linux via 948 Kernel Flaws in OpenAI ResearchSame vendor · SecurityWeek
• InfoOpenAI’s GPT-6 Cyber ups the ante on vulnerability discoverySame vendor · CSO Online
• InfoOpenAI says its new cybersecurity model is better at not hacking other companiesSame vendor · The Verge (AI)
• InfoOpenAI Finds GPT-6 Astra Quietly Holding Back on Internal Red-Teaming, Exploit TasksSame vendor · SecurityWeek