Loading story…
OpenAI introduced two new ChatGPT account security features: Lockdown Mode, designed to reduce prompt-injection-driven data exfiltration, and Active Sessions, which lets users review and terminate account sign-ins. Lockdown Mode restricts ChatGPT’s access to the web and external services so that even if hidden malicious instructions reach the model, the outbound exfiltration step is harder to complete. OpenAI first made the feature available to enterprise customers in February before expanding rollout to personal and self-serve business accounts in early June.
The company said Lockdown Mode is intended for users and organizations handling sensitive data, but it comes with functional tradeoffs. When enabled, it disables live connector access, write actions, certain tools such as Finances and shopping agents, and it cannot be used with Developer Mode. Active Sessions adds visibility into logged-in devices, approximate locations, sign-in times, app usage, and trusted or current session status, while allowing users to revoke individual sessions or sign out everywhere; however, it does not support SSO-based accounts and does not track third-party app sessions or Codex CLI logins.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
2 events from the most recent confirmed update back to the earliest known activity.
In early June, OpenAI began rolling out Lockdown Mode to personal accounts and self-serve business accounts. OpenAI also introduced Active Sessions, a security setting that lets users review and terminate ChatGPT account sign-ins.
OpenAI first made ChatGPT Lockdown Mode available to enterprise plans. The feature is designed to reduce prompt-injection-driven data exfiltration by limiting access to the web and external services.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
OpenAI has begun rolling out **Lockdown Mode** for ChatGPT accounts as an optional security setting designed to reduce data exfiltration risk from prompt-injection attacks. The feature is available for eligible personal users across Free, Go, Plus, Pro, and self-serve ChatGPT Business plans, with reporting also indicating availability for managed enterprise workspaces. When enabled, it restricts or disables capabilities that create outbound paths to external services, including live web browsing, image retrieval or support, deep research, agent mode, Canvas networking approvals, and external file downloads. OpenAI said the control is intended for people handling sensitive data, but warned it does **not** prevent prompt injections from reaching model context, stop manipulated responses, or guarantee complete prevention of data leakage. The company added that Lockdown Mode cannot be used at the same time as Developer Mode and does not change memory, file upload, or conversation-sharing behavior. For enterprise use, OpenAI said protection also depends on administrator controls such as **RBAC**, trusted app settings, and connector permissions, while residual risk remains through third-party apps, feature combinations, and emerging attack techniques; it also introduced session-management tools so users can review active ChatGPT sessions and sign out of individual or all sessions if suspicious activity is detected.
Jun 29, 2026
OpenAI introduced **Lockdown Mode** and **Elevated Risk** labels in *ChatGPT* to reduce exposure to **prompt injection** and related data-exfiltration risks when AI features interact with external systems. Lockdown Mode is positioned as an optional, advanced setting for higher-risk users and environments (notably *ChatGPT Enterprise*, *Edu*, *for Healthcare*, and *for Teachers*) that restricts tool access and limits how ChatGPT can reach outside systems; reported controls include disabling or constraining capabilities attackers could abuse via conversations or connected apps, and limiting browsing so that no live network requests leave OpenAI-controlled infrastructure (with browsing constrained to cached content). Admins can enable the setting via workspace controls and apply additional restrictions through dedicated roles, while Elevated Risk labels provide in-product warnings and guidance for features that increase risk when connecting to apps or the web, including across *ChatGPT*, *ChatGPT Atlas*, and *Codex*. Separate research highlighted how AI assistants with web-browsing/URL-fetching features can be abused as stealthy **command-and-control (C2) relays**, demonstrating a technique against **Microsoft Copilot** and **xAI Grok** that tunnels operator commands and victim data through legitimate AI web interfaces and can work without an API key or registered account. In parallel, the **European Parliament** reportedly disabled built-in AI tools on lawmakers’ work devices due to cybersecurity and privacy concerns about uploading sensitive correspondence to third-party cloud AI providers and uncertainty about what data is shared and retained. Other referenced material focused on general productivity customization of ChatGPT via “Custom Instructions,” rather than a specific security event or disclosure.
Jun 29, 2026
OpenAI announced a broader rollout of its `GPT-5.6` model family and introduced **ChatGPT Work**, an enterprise-focused agentic AI service designed to automate multi-step tasks across applications, files, and business tools. The company said the new models—reported as variants including Sol, Terra, and Luna—deliver stronger benchmark performance while lowering inference costs and token consumption, and positioned them against rival Anthropic offerings on coding and agentic evaluations. OpenAI said ChatGPT Work can access a user’s desktop, browser, notes, and enterprise applications to carry out longer-running workflows such as creating spreadsheets, presentations, websites, and other business documents. The rollout begins on web and mobile for **Pro, Enterprise, and Edu** customers, with broader availability planned for other paid tiers, while OpenAI said `GPT-5.6` includes safety measures such as model protections, real-time checks, monitoring, and trust-based access controls; the wider release also follows earlier U.S. government restrictions tied to concerns about advanced cybersecurity and biology capabilities.
Jul 13, 2026