OpenAI Warns Prompt Injection Attacks Are a Never-Ending Battle for AI Browsers
OpenAI is using an AI-powered attacker that simulates real-world prompt injection attempts to train its ChatGPT Atlas browser, acknowledging that fully eliminating the threat is unlikely and continuous hardening is needed. The company emphasizes the importance of ongoing monitoring and security measures, as agentic AI on browsers presents significant security risks due to access to sensitive user data.