1 incident
Control: Prompt-injection detection Outcome: Did not hold
HeldFailedGot aroundMissingNot mentionedNot read yetAttacker's ownOrder: model · harness · application · target
| Date | Incident | Risk | Chain | Controls named |
|---|---|---|---|---|
| 2026-08-05 | Intent collision via X comment hijacks ChatGPT Atlas into mass WhatsApp phishing from victim's account OpenAI |
Hidden instructions hijack the agent |