Hidden ChatGPT Channel Let Attackers Read a Stranger's Gmail

Check Point's researchers planted a hidden instruction that turned a victim's ChatGPT session into a coerced insider: it quietly read the connected Gmail inbox and passed the contents to an attacker's session through a shared internal cache. OpenAI has since shut down the implicated service. A controlled proof of concept; customer exploitation was never confirmed.