OpenAI Explains URL-Based Data Exfiltration Mitigations in New Paper

Last week I saw this paper from OpenAI called “Preventing URL-Based Data Exfiltration in Language-Model Agents”, which goes into detail on new mitigations they’ve added. This is a great read. I like this transparency. Initial Disclosure in 2023 Nearly three years ago I reported the zero-click data exfiltration exploit to OpenAI.

Summary from Embrace The Red.

Explained

The technology and terms in this story. Learn more

More in Vulnerabilities