Close Menu
Best in TechnologyBest in Technology
  • News
  • Phones
  • Laptops
  • Gadgets
  • Gaming
  • AI
  • Tips
  • More
    • Web Stories
    • Global
    • Press Release

Subscribe to Updates

Get the latest tech news and updates directly to your inbox.

What's On

How to Season a Griddle—and How to Keep It in Good Shape

7 August 2025

16 Golden Rules That Business Travelers Swear By

7 August 2025

A Single Poisoned Document Could Leak ‘Secret’ Data Via ChatGPT

7 August 2025
Facebook X (Twitter) Instagram
Just In
  • How to Season a Griddle—and How to Keep It in Good Shape
  • 16 Golden Rules That Business Travelers Swear By
  • A Single Poisoned Document Could Leak ‘Secret’ Data Via ChatGPT
  • The Extravagant Rise of the Corporate Incentive Trip
  • These Democrats Think the Party Needs AI to Win Elections
  • Trumpworld Knows Epstein Is a Problem. But They Can’t Solve It
  • Amazon Great Freedom Festival Sale 2025: Top Deals on Mobile Accessories From Xiaomi, Ambrane, and More
  • Inside the US Government’s Unpublished Report on AI Safety
Facebook X (Twitter) Instagram Pinterest Vimeo
Best in TechnologyBest in Technology
  • News
  • Phones
  • Laptops
  • Gadgets
  • Gaming
  • AI
  • Tips
  • More
    • Web Stories
    • Global
    • Press Release
Subscribe
Best in TechnologyBest in Technology
Home » A Single Poisoned Document Could Leak ‘Secret’ Data Via ChatGPT
News

A Single Poisoned Document Could Leak ‘Secret’ Data Via ChatGPT

News RoomBy News Room7 August 20253 Mins Read
Share Facebook Twitter Pinterest LinkedIn Tumblr Reddit Telegram Email
Share
Facebook Twitter LinkedIn Pinterest Email

The latest generative AI models are not just stand-alone text-generating chatbots—instead, they can easily be hooked up to your data to give personalized answers to your questions. OpenAI’s ChatGPT can be linked to your Gmail inbox, allowed to inspect your GitHub code, or find appointments in your Microsoft calendar. But these connections have the potential to be abused—and researchers have shown it can take just a single “poisoned” document to do so.

New findings from security researchers Michael Bargury and Tamir Ishay Sharbat, revealed at the Black Hat hacker conference in Las Vegas today, show how a weakness in OpenAI’s Connectors allowed sensitive information to be extracted from a Google Drive account using an indirect prompt injection attack. In a demonstration of the attack, dubbed AgentFlayer, Bargury shows how it was possible to extract developer secrets, in the form of API keys, that were stored in a demonstration Drive account.

The vulnerability highlights how connecting AI models to external systems and sharing more data across them increases the potential attack surface for malicious hackers and potentially multiplies the ways where vulnerabilities may be introduced.

“There is nothing the user needs to do to be compromised, and there is nothing the user needs to do for the data to go out,” Bargury, the CTO at security firm Zenity, tells WIRED. “We’ve shown this is completely zero-click; we just need your email, we share the document with you, and that’s it. So yes, this is very, very bad,” Bargury says.

OpenAI did not immediately respond to WIRED’s request for comment about the vulnerability in Connectors. The company introduced Connectors for ChatGPT as a beta feature earlier this year, and its website lists at least 17 different services that can be linked up with its accounts. It says the system allows you to “bring your tools and data into ChatGPT” and “search files, pull live data, and reference content right in the chat.”

Bargury says he reported the findings to OpenAI earlier this year and that the company quickly introduced mitigations to prevent the technique he used to extract data via Connectors. The way the attack works means only a limited amount of data could be extracted at once—full documents could not be removed as part of the attack.

“While this issue isn’t specific to Google, it illustrates why developing robust protections against prompt injection attacks is important,” says Andy Wen, senior director of security product management at Google Workspace, pointing to the company’s recently enhanced AI security measures.

Share. Facebook Twitter Pinterest LinkedIn Tumblr Email
Previous ArticleThe Extravagant Rise of the Corporate Incentive Trip
Next Article 16 Golden Rules That Business Travelers Swear By

Related Articles

News

How to Season a Griddle—and How to Keep It in Good Shape

7 August 2025
News

16 Golden Rules That Business Travelers Swear By

7 August 2025
News

The Extravagant Rise of the Corporate Incentive Trip

7 August 2025
News

These Democrats Think the Party Needs AI to Win Elections

7 August 2025
News

Trumpworld Knows Epstein Is a Problem. But They Can’t Solve It

6 August 2025
News

Inside the US Government’s Unpublished Report on AI Safety

6 August 2025
Demo
Top Articles

ChatGPT o1 vs. o1-mini vs. 4o: Which should you use?

15 December 2024104 Views

Costco partners with Electric Era to bring back EV charging in the U.S.

28 October 202495 Views

Oppo Reno 14, Reno 14 Pro India Launch Timeline and Colourways Leaked

27 May 202582 Views

Subscribe to Updates

Get the latest tech news and updates directly to your inbox.

Latest News
News

Trumpworld Knows Epstein Is a Problem. But They Can’t Solve It

News Room6 August 2025
Phones

Amazon Great Freedom Festival Sale 2025: Top Deals on Mobile Accessories From Xiaomi, Ambrane, and More

News Room6 August 2025
News

Inside the US Government’s Unpublished Report on AI Safety

News Room6 August 2025
Most Popular

The Spectacular Burnout of a Solar Panel Salesman

13 January 2025129 Views

ChatGPT o1 vs. o1-mini vs. 4o: Which should you use?

15 December 2024104 Views

Costco partners with Electric Era to bring back EV charging in the U.S.

28 October 202495 Views
Our Picks

The Extravagant Rise of the Corporate Incentive Trip

7 August 2025

These Democrats Think the Party Needs AI to Win Elections

7 August 2025

Trumpworld Knows Epstein Is a Problem. But They Can’t Solve It

6 August 2025

Subscribe to Updates

Get the latest tech news and updates directly to your inbox.

Facebook X (Twitter) Instagram Pinterest
  • Privacy Policy
  • Terms of use
  • Advertise
  • Contact Us
© 2025 Best in Technology. All Rights Reserved.

Type above and press Enter to search. Press Esc to cancel.