Close Menu
Best in TechnologyBest in Technology
  • News
  • Phones
  • Laptops
  • Gadgets
  • Gaming
  • AI
  • Tips
  • More
    • Web Stories
    • Global
    • Press Release

Subscribe to Updates

Get the latest tech news and updates directly to your inbox.

What's On

DOGE Operatives Are Joining Donald Trump’s New National Design Studio

29 August 2025

The Internet Revolutionized Porn. Age Verification Could Upend Everything

29 August 2025

Resident Evil Outbreak: Starting RE Requiem’s Spiritual Predecessor | Super Replay

29 August 2025
Facebook X (Twitter) Instagram
Just In
  • DOGE Operatives Are Joining Donald Trump’s New National Design Studio
  • The Internet Revolutionized Porn. Age Verification Could Upend Everything
  • Resident Evil Outbreak: Starting RE Requiem’s Spiritual Predecessor | Super Replay
  • The Best Labor Day Deals and Sales
  • How Much Melatonin Should You Be Taking?
  • FEMA’s Chaotic Summer Has Gone From Bad to Worse
  • The White House Apparently Ordered Federal Workers to Roll Out Grok ‘ASAP’
  • Review: Insta360 Go Ultra Action Camera
Facebook X (Twitter) Instagram Pinterest Vimeo
Best in TechnologyBest in Technology
  • News
  • Phones
  • Laptops
  • Gadgets
  • Gaming
  • AI
  • Tips
  • More
    • Web Stories
    • Global
    • Press Release
Subscribe
Best in TechnologyBest in Technology
Home » A Single Poisoned Document Could Leak ‘Secret’ Data Via ChatGPT
News

A Single Poisoned Document Could Leak ‘Secret’ Data Via ChatGPT

News RoomBy News Room7 August 20253 Mins Read
Share Facebook Twitter Pinterest LinkedIn Tumblr Reddit Telegram Email
Share
Facebook Twitter LinkedIn Pinterest Email

The latest generative AI models are not just stand-alone text-generating chatbots—instead, they can easily be hooked up to your data to give personalized answers to your questions. OpenAI’s ChatGPT can be linked to your Gmail inbox, allowed to inspect your GitHub code, or find appointments in your Microsoft calendar. But these connections have the potential to be abused—and researchers have shown it can take just a single “poisoned” document to do so.

New findings from security researchers Michael Bargury and Tamir Ishay Sharbat, revealed at the Black Hat hacker conference in Las Vegas today, show how a weakness in OpenAI’s Connectors allowed sensitive information to be extracted from a Google Drive account using an indirect prompt injection attack. In a demonstration of the attack, dubbed AgentFlayer, Bargury shows how it was possible to extract developer secrets, in the form of API keys, that were stored in a demonstration Drive account.

The vulnerability highlights how connecting AI models to external systems and sharing more data across them increases the potential attack surface for malicious hackers and potentially multiplies the ways where vulnerabilities may be introduced.

“There is nothing the user needs to do to be compromised, and there is nothing the user needs to do for the data to go out,” Bargury, the CTO at security firm Zenity, tells WIRED. “We’ve shown this is completely zero-click; we just need your email, we share the document with you, and that’s it. So yes, this is very, very bad,” Bargury says.

OpenAI did not immediately respond to WIRED’s request for comment about the vulnerability in Connectors. The company introduced Connectors for ChatGPT as a beta feature earlier this year, and its website lists at least 17 different services that can be linked up with its accounts. It says the system allows you to “bring your tools and data into ChatGPT” and “search files, pull live data, and reference content right in the chat.”

Bargury says he reported the findings to OpenAI earlier this year and that the company quickly introduced mitigations to prevent the technique he used to extract data via Connectors. The way the attack works means only a limited amount of data could be extracted at once—full documents could not be removed as part of the attack.

“While this issue isn’t specific to Google, it illustrates why developing robust protections against prompt injection attacks is important,” says Andy Wen, senior director of security product management at Google Workspace, pointing to the company’s recently enhanced AI security measures.

Share. Facebook Twitter Pinterest LinkedIn Tumblr Email
Previous ArticleThe Extravagant Rise of the Corporate Incentive Trip
Next Article 16 Golden Rules That Business Travelers Swear By

Related Articles

News

DOGE Operatives Are Joining Donald Trump’s New National Design Studio

29 August 2025
News

The Internet Revolutionized Porn. Age Verification Could Upend Everything

29 August 2025
News

The Best Labor Day Deals and Sales

29 August 2025
News

How Much Melatonin Should You Be Taking?

29 August 2025
News

FEMA’s Chaotic Summer Has Gone From Bad to Worse

29 August 2025
News

The White House Apparently Ordered Federal Workers to Roll Out Grok ‘ASAP’

29 August 2025
Demo
Top Articles

ChatGPT o1 vs. o1-mini vs. 4o: Which should you use?

15 December 2024105 Views

Costco partners with Electric Era to bring back EV charging in the U.S.

28 October 202495 Views

5 laptops to buy instead of the M4 MacBook Pro

17 November 202490 Views

Subscribe to Updates

Get the latest tech news and updates directly to your inbox.

Latest News
News

FEMA’s Chaotic Summer Has Gone From Bad to Worse

News Room29 August 2025
News

The White House Apparently Ordered Federal Workers to Roll Out Grok ‘ASAP’

News Room29 August 2025
News

Review: Insta360 Go Ultra Action Camera

News Room29 August 2025
Most Popular

The Spectacular Burnout of a Solar Panel Salesman

13 January 2025129 Views

ChatGPT o1 vs. o1-mini vs. 4o: Which should you use?

15 December 2024105 Views

Costco partners with Electric Era to bring back EV charging in the U.S.

28 October 202495 Views
Our Picks

The Best Labor Day Deals and Sales

29 August 2025

How Much Melatonin Should You Be Taking?

29 August 2025

FEMA’s Chaotic Summer Has Gone From Bad to Worse

29 August 2025

Subscribe to Updates

Get the latest tech news and updates directly to your inbox.

Facebook X (Twitter) Instagram Pinterest
  • Privacy Policy
  • Terms of use
  • Advertise
  • Contact Us
© 2025 Best in Technology. All Rights Reserved.

Type above and press Enter to search. Press Esc to cancel.