How OpenAI is defending ChatGPT Atlas from attacks now - and why safety's not guaranteed

Follow ZDNET: Add us as a preferred source on Google. OpenAI is automating the process of testing ChatGPT Atlas, its agentic web browser, for vulnerabilities that could harm users. At the same time, the company acknowledges that the nature of this new type of browser likely means it will never be completely protected from certain kinds of attacks. The company published a blog post on Tuesday describing its latest effort to secure Atlas against prompt injection attacks, in which malicious third parties covertly slip instructions to the agent behind the browser, causing it to act against the user's interests; think of it like a digital virus that temporarily takes control of a host. Also: Use an AI browser? 5 ways to protect yourself from prompt injections - before it's too late The new approach utilizes AI to mimic the actions of human hackers. By automating the red teaming process, researchers can explore the security surface area much more quickly and thoroughly -- which is all the more important considering the speed at which agentic web browsers are being shipped to consumers. Critically, however, the blog post emphasizes that even with the most sophisticated security methods, agentic web browsers like Atlas are intrinsically vulnerable and will likely remain so. The best that the industry can hope for, OpenAI says, is to try to stay one step ahead of attackers. "We expect adversaries to keep adapting," the company writes in the blog post. "Prompt injection, much like scam...