OpenAI Bolsters ChatGPT Security Against Prompt Injection
OpenAI has introduced two new advanced security features for ChatGPT to combat the rising threat of prompt injection attacks, which occur when AI systems interact with websites and external applications. These attacks can allow malicious actors to manipulate the AI into performing harmful actions or exposing confidential data. Both new features enhance the platform's existing defenses, including its sandbox environment, URL data leak prevention, and other multi-layered security protocols.

The first feature is Lockdown Mode, an optional, advanced setting designed for users with stringent security requirements, rather than the average user. It significantly lowers the risk of data leaks by imposing strict controls on how ChatGPT communicates with external systems. This mode proactively disables or restricts tools that are potential attack vectors. For instance, the web browsing feature will only access cached content, and functionalities without robust security assurances will be turned off entirely.
Currently, this mode is available for ChatGPT Enterprise, Education, Healthcare, and Teacher editions. Administrators can enable it by creating specific roles in the dashboard settings, where they can also define precisely which external applications and actions are permitted while Lockdown Mode is active. OpenAI plans to make this mode available to consumer users in the coming months. Furthermore, the Compliance API Logs Platform assists administrators in conducting regulatory audits of application usage and data sharing practices.
The second measure involves consistently tagging higher-risk functions within ChatGPT, ChatGPT Atlas, and Codex with an **"Elevated Risk"** label, standardizing how potential threats are communicated to users.
OpenAI explained that certain internet-connected capabilities, while increasing the AI's usefulness, still present risks not fully mitigated by current industry safeguards. This label provides clear visibility into these risks, empowering users to make informed decisions about whether to use the features, particularly in situations involving sensitive information. For example, when developers enable internet access for Codex, the label will appear on the interface, detailing the changes it brings, potential dangers, appropriate use cases, and recommendations for reducing risk.
Related article
Stripe to Acquire OpenRouter as AI Model Routing Gains Momentum
Stripe has agreed to acquire OpenRouter, an AI model-routing platform that gives developers access to hundreds of models through a single interface. The deal adds model selection and routing to Stripe’s existing work around AI usage and token-based b
Former OpenAI Researcher Barrett Zoph Returns to Google to Support Gemini Development
Barret Zoph, who previously abruptly left and joined OpenAI due to a disagreement with Thinking Machines Lab CEO Miriam Mularati, has once again changed employers. Alphabet's Google announced that Zoph will return as Vice President of Research, bring
How Recursive Intelligence Raised $335M at $4B Valuation in 4 Months
The co-founders of startup Ricursive Intelligence seemed destined to be co-founders.Anna Goldie, CEO, and Azalia Mirhoseini, CTO, are so well-known in the AI community that they were among those AI engineers who “got those weird emails from Zuckerber
Related Special Topic Recommendations
Comments (0)
0/500
OpenAI has introduced two new advanced security features for ChatGPT to combat the rising threat of prompt injection attacks, which occur when AI systems interact with websites and external applications. These attacks can allow malicious actors to manipulate the AI into performing harmful actions or exposing confidential data. Both new features enhance the platform's existing defenses, including its sandbox environment, URL data leak prevention, and other multi-layered security protocols.

The first feature is Lockdown Mode, an optional, advanced setting designed for users with stringent security requirements, rather than the average user. It significantly lowers the risk of data leaks by imposing strict controls on how ChatGPT communicates with external systems. This mode proactively disables or restricts tools that are potential attack vectors. For instance, the web browsing feature will only access cached content, and functionalities without robust security assurances will be turned off entirely.
Currently, this mode is available for ChatGPT Enterprise, Education, Healthcare, and Teacher editions. Administrators can enable it by creating specific roles in the dashboard settings, where they can also define precisely which external applications and actions are permitted while Lockdown Mode is active. OpenAI plans to make this mode available to consumer users in the coming months. Furthermore, the Compliance API Logs Platform assists administrators in conducting regulatory audits of application usage and data sharing practices.
The second measure involves consistently tagging higher-risk functions within ChatGPT, ChatGPT Atlas, and Codex with an **"Elevated Risk"** label, standardizing how potential threats are communicated to users.
OpenAI explained that certain internet-connected capabilities, while increasing the AI's usefulness, still present risks not fully mitigated by current industry safeguards. This label provides clear visibility into these risks, empowering users to make informed decisions about whether to use the features, particularly in situations involving sensitive information. For example, when developers enable internet access for Codex, the label will appear on the interface, detailing the changes it brings, potential dangers, appropriate use cases, and recommendations for reducing risk.
Stripe to Acquire OpenRouter as AI Model Routing Gains Momentum
Stripe has agreed to acquire OpenRouter, an AI model-routing platform that gives developers access to hundreds of models through a single interface. The deal adds model selection and routing to Stripe’s existing work around AI usage and token-based b
Former OpenAI Researcher Barrett Zoph Returns to Google to Support Gemini Development
Barret Zoph, who previously abruptly left and joined OpenAI due to a disagreement with Thinking Machines Lab CEO Miriam Mularati, has once again changed employers. Alphabet's Google announced that Zoph will return as Vice President of Research, bring
How Recursive Intelligence Raised $335M at $4B Valuation in 4 Months
The co-founders of startup Ricursive Intelligence seemed destined to be co-founders.Anna Goldie, CEO, and Azalia Mirhoseini, CTO, are so well-known in the AI community that they were among those AI engineers who “got those weird emails from Zuckerber





Home






