Topic
ChatGPT
Employee Fired After Uploading Corporate Documents to DeepSeek: How Data Security Works in AI Services
AI Security
OpenAI Disables Coordinated ChatGPT Network Used for Financial Scams and Identity Forgery
Fraud & Social Engineering
How IT Professionals Risk Leaking Confidential Data When Using ChatGPT and Other LLMs
AI SecurityPrompt Injection Explained: One Practical Demonstration Shows Why It Is Not a Technical Vulnerability
The article demonstrates through direct experiments that prompt injection is not a technical attack but a normal operational behavior of large language models. The author uploaded a PDF containing Dostoevsky text plus hidden instructions to nine AI services and measured how many followed the embedded directives. Two services ignored the instructions entirely, five partially reformatted output, and two fully executed both the list formatting and the persistent account-wide instruction. The same services were then asked to translate the hidden instructions, resulting in eight out of nine interpreting the translation request itself as an executable command. The piece concludes that the only reliable mitigations are explicit user-level rules or service-level refusals, as demonstrated by ChatGPT and Claude.
AgentForger Vulnerability in ChatGPT Workspace Agents Enabled Malicious AI Deployment via Single Phishing Link
A vulnerability in ChatGPT Workspace Agents allowed attackers to create and deploy a malicious AI agent inside an organization from a single phishing link. Named AgentForger, the flaw was fixed by OpenAI on June 8, 2026. The attack exploited a permissive parameter in the Agent Builder that accepted instructions directly through the URL. An authenticated user opening the prepared link would trigger automatic execution of the command without additional confirmation. The victim required access to Workspace Agents and at least one pre-authorized enterprise connector such as Outlook, Gmail, Google Drive, Slack, Teams, or Google Calendar. The malicious prompt instructed the platform to create an agent, connect available applications, disable approval requests, publish the component, and schedule it for recurring operation. In the demonstration, the agent monitored emails from the attacker with subjects starting with “TASK” and executed the contained instructions while returning results to the attacker-controlled address.
Neural Networks Without Magic: 80-Year History, Business Applications, and Why They Will Not Replace Experts Overnight
In an in-depth interview, Data Science team lead Vasily Ryazanov traces neural networks back to the 1970s work of his father and academician Zhuravlev, explaining that the technology is approximately 80 years old rather than a recent phenomenon. Ryazanov details how modern large language models such as ChatGPT and Claude function by predicting tokens within a context window after pre-training on massive datasets, and he contrasts prompt engineering with the deeper mathematical and programming skills required to build models. He describes real-world deployments including an antifraud system for the insurance company Alliance that automates detection of medical claim fraud. The discussion covers practical limits such as hallucinations, risks of uploading sensitive data to external services, and the psychological tendency of users to over-trust fluent model outputs. Ryazanov emphasizes that while tools like Claude and ChatGPT accelerate routine tasks, they remain assistants that require human verification on high-stakes decisions in health, finance, or security.
The Lethal Trifecta: Architectural Anti-Pattern Behind Most AI Agent Vulnerabilities
Security researcher Simon Willison has identified the Lethal Trifecta as a core anti-pattern in AI agent design. The combination of private data, untrusted content, and any external output channel creates systems that are vulnerable by construction. Prompt injection attacks succeed because large language models process instructions and data as flat text without structural boundaries. Mitigation requires breaking the triad through architectural separation rather than relying on probabilistic filters or markup. The article distinguishes between user-controlled agents and autonomous cloud agents, recommending task isolation, least-privilege connectors, and verified data-flow policies. Approaches such as CaMeL and formal verification frameworks are highlighted as emerging solutions for enforcing boundaries programmatically.
ChatGPT Returns to WhatsApp After EU Forces Meta to Reopen Business API to Rival AI Bots
Home users of generative AI services have begun seeing <b>ChatGPT</b> working again inside <b>WhatsApp</b>, owned by <b>Meta</b> (recognized as extremist and banned in Russia). The partial restoration follows an EU antitrust investigation that accused Meta of abusing its dominant position to favor its own AI assistant. <b>OpenAI</b> originally launched the integration in 2024, allowing users to message the chatbot like any regular contact without extra apps. In 2025 Meta updated its <b>Business API</b> rules, effectively blocking third-party universal chatbots and pushing competitors out. After the European Commission intervened, Meta was required to reopen access, and <b>ChatGPT</b> is now gradually reappearing for some users. The rollout remains uneven, with some contacts responding normally while others stay silent, and no paid subscription is required. Neither Meta nor OpenAI has officially linked the return to the EU decision.
15-Year-Old Saitama Student Uses ChatGPT to Mass-Cancel 46,812 Bandai Channel Subscriptions, Triggering Service Outage and Data Breach Concerns
A 15-year-old boy from Saitama Prefecture has been arrested for developing and deploying a program that canceled 46,812 user subscriptions on the Bandai Channel anime streaming service owned by Bandai Namco Filmworks. The teenager initially wrote the code himself while in middle school but turned to ChatGPT to rewrite it in a faster programming language after the original version proved too slow. On November 4, 2025, he sent thousands of fake account-deletion requests that forced the company to temporarily shut down the platform. When the company attempted to block his access, the student changed his IP address more than 30 times to continue the attack. He had previously been detained in June for other computer-related offenses and later admitted he simply wanted access to numerous accounts without holding any grudge against the company. The incident prompted Bandai Namco Filmworks to report the matter to Tokyo police and later disclose a potential leak of personal data belonging to up to 1.36 million users, although no evidence of data publication has been found.