Field notes from the edge.
What our engineers learned this week. Hands-on technical deep-dives, postmortems, and strategy frameworks.
AIOpenAI Disrupts Poipet Scam Network Using ChatGPT Across Multiple Fraud Schemes
OpenAI has disrupted a sophisticated scam network based in Poipet, Cambodia, that exploited ChatGPT to conduct multiple fraud schemes including investment scams, romance fraud, gambling operations, and law enforcement impersonation. The company banned a coordinated network of ChatGPT accounts traced to Southeast Asia, highlighting the growing challenge of AI-powered cybercrime operations.
AINew ChatGPT Lockdown Mode Limits Tools That Could Enable Data Exfiltration
OpenAI has introduced Lockdown Mode for ChatGPT personal accounts to mitigate data exfiltration risks from prompt injection attacks. The feature targets users and organizations handling sensitive data by restricting certain tools and capabilities. It is available across all personal account tiers including Free, Go, Plus, and Pro.
AIChatGPhish Vulnerability Turns ChatGPT Web Summaries Into a Phishing Surface
Cybersecurity researchers at Permiso Security have identified a vulnerability dubbed 'ChatGPhish' in OpenAI's ChatGPT that exploits the platform's trust in Markdown links and images. The flaw enables attackers to execute prompt injection attacks and conduct phishing campaigns by manipulating how ChatGPT's web interface renders Markdown content. This vulnerability highlights emerging security risks