
ChatGPT Lockdown Mode bypass enables silent chat exfiltration
Check Point says ChatGPT Classic needs no click: a conversation can leak full history and open phishing popups.
6 stories, newest first · one card per story

Check Point says ChatGPT Classic needs no click: a conversation can leak full history and open phishing popups.

Nested iframes and popups in ChatGPT preview let attackers exfiltrate full chat histories silently in desktop app.

Bypass uses nested frames in HTML previews to escape sandbox and enable silent data theft; patched September 18 2026.

The October 30 notices are separate from August alerts covering 110 countries, and Apple named no spyware or flaw.

Recipients include journalists and filmmakers; Apple has now notified users in more than 150 countries and does not name attackers.

Apple sent threat notifications to users in 110 countries warning of targeted mercenary spyware attacks and recommending Lockdown Mode.
Today 1.5K readers · 2.4K views · 754 reads · all time 189K views