One ChatGPT link could smuggle a rogue AI agent into your company
Any connected apps and actions would also have to be allowed by the organization's administrators. REG AD googletag.cmd.push(function() { googletag.display('labrador/thereg/article/desktop/b'); }); Rather than stealing passwords or browser sessions, the technique effectively tricked ChatGPT into building an autonomous assistant that could act through the employee's connected accounts and permissions. REG AD googletag.cmd.push(function() { googletag.display('labrador/thereg/article/desktop/c'); }); If the victim had already connected services such as Outlook, Teams, Slack, SharePoint, or Google Drive, and the workspace allowed the relevant actions, Zenity says the agent could use them too.
- ▪Any connected apps and actions would also have to be allowed by the organization's administrators.
- ▪REG AD googletag.cmd.push(function() { googletag.display('labrador/thereg/article/desktop/b'); }); Rather than stealing passwords or browser sessions, the technique effectively tricked ChatGPT into building an autonomous assistant that coul
- ▪REG AD googletag.cmd.push(function() { googletag.display('labrador/thereg/article/desktop/c'); }); If the victim had already connected services such as Outlook, Teams, Slack, SharePoint, or Google Drive, and the workspace allowed the releva
Opening excerpt (first ~120 words) tap to expand
(function() { let windowUrl = window.location.href; windowUrl = windowUrl.substring(windowUrl.indexOf('?') + 1); let messageElement = document.querySelector('.shareableMessage'); if (windowUrl && windowUrl.includes('code') && windowUrl.includes('expires')) { messageElement.style.display = 'block'; } })(); security One ChatGPT link could smuggle a rogue AI agent into your company Researchers say OpenAI flaw let phishing bait create an autonomous corporate mole armed with employee access Carly Page Carly Page Published thu 23 Jul 2026 // 14:02 UTC One click on what looked like an ordinary ChatGPT link could plant an attacker-controlled AI agent inside a company's ChatGPT workspace, according to researchers who uncovered a flaw in OpenAI's workspace agents.Security firm Zenity Labs has…
Excerpt limited to ~120 words for fair-use compliance. The full article is at theregister.