Find notable cyber news and cases, enriched with sources, timelines, and signals.

ChatGPT widens Lockdown Mode and Active Sessions to reduce prompt-injection exfiltration and session compromise

Security Tool/Service
First reported
Last updated
Happening score
H score 10
1 unique sources, 1 articles

Summary

Hide ▲

ChatGPT is expanding access to Lockdown Mode and Active Sessions, tightening protection against prompt-injection data exfiltration and account/session compromise. Lockdown Mode limits outbound network requests and restricts features that could move sensitive data off the platform. Active Sessions lets users review signed-in devices and log out sessions they do not recognize.

Related Happenings

OpenAI rolls out ChatGPT Lockdown Mode and Active Sessions for prompt-injection defense and sign-in auditing

Security Tool/Service
H score10 First: 08.06.2026 17:00 Last: 08.06.2026 17:00 Sources 1

About this happening: OpenAI rolled out Lockdown Mode and Active Sessions in ChatGPT, adding controls that reduce prompt-injection data exfiltration risk and improve signed-in session...

OpenAI ChatGPT Lockdown Mode rollout limits prompt-injection exfiltration paths

Security Tool/Service
H score10 First: 06.06.2026 16:36 Last: 06.06.2026 16:36 Sources 1

About this happening: OpenAI ChatGPT is rolling out Lockdown Mode for eligible personal accounts, reducing the risk of prompt-injection-driven data exfiltration. The update adds stricter li...

ChatGPT single-prompt DNS side-channel exfiltration remote code execution flaw

Vulnerability
H score33 First: 31.03.2026 16:01 Last: 31.03.2026 16:01 Sources 1

About this happening: A ChatGPT vulnerability let a single malicious prompt covertly exfiltrate prompts, messages, uploaded files, and other sensitive content through a DNS side channel. Th...

WhatsApp adds Strict Account Settings to harden targeted accounts against spyware

Security Tool/Service
H score15 First: 27.01.2026 18:54 Last: 27.01.2026 18:54 Sources 1

About this happening: WhatsApp is rolling out Strict Account Settings to harden targeted accounts against spyware and unknown senders, reducing risk for journalists and other public-fac...

CISA urges E2EE, FIDO, and device hardening for highly targeted mobile users

Defensive Guidance
H score13 First: 25.11.2025 08:42 Last: 25.11.2025 08:42 Sources 1

About this happening: CISA issued new defensive guidance for highly targeted mobile users, warning that commercial spyware and RAT-driven abuse can compromise messaging apps and linked acco...

Timeline

  1. 08.06.2026 11:32 2 articles · 1mo ago

    OpenAI rolls out ChatGPT Lockdown Mode and Active Sessions

    Mitigation Patch Update

    OpenAI is broadly rolling out ChatGPT Lockdown Mode for personal and self-serve Business accounts and Active Sessions for most ChatGPT accounts, adding controls that limit outbound network requests to reduce prompt-injection data exfiltration risk and let users review signed-in devices and log out unfamiliar sessions. The rollout follows Advanced Account Security for higher-risk users, which requires physical security keys or passkeys and shortens sign-in sessions.

    Show sources