OpenAI has begun rolling out Lockdown Mode to ChatGPT, a new security setting designed to block attackers from stealing data through prompt injection attacks. The feature disables live web browsing, agent mode, deep research, image retrieval, Canvas networking, and file downloads. It is available to logged-in users across Free, Go, Plus, Pro, and self-serve ChatGPT Business plans.

Prompt injection remains what OpenAI calls a “frontier” problem affecting all large language models. The attack works by hiding malicious instructions in content the model processes, such as a webpage or uploaded file. If the model follows those instructions, it can be tricked into sending sensitive data to an attacker-controlled server.

Lockdown Mode does not stop injections from happening. A malicious payload embedded in a cached webpage or uploaded PDF can still influence the model’s behaviour. What it does is shut down the outbound pathways an attacker would use to exfiltrate the data. No live browsing means no network requests to external servers. No image retrieval means no pixel-based data channels.

“Lockdown Mode is designed to substantially reduce the risk of prompt injection-based data exfiltration, but it does not guarantee that data exfiltration cannot happen,” OpenAI said. “Risk may remain through enabled Apps, unforeseen combinations of capabilities, or newly discovered techniques.”

The trade-off is significant. With Lockdown Mode on, ChatGPT loses most of what makes its agent and research features useful. Live browsing drops to cached content only. Agent mode is gone entirely. Deep research is disabled. It is, as OpenAI acknowledges, “not intended for everyone.”

The feature arrives as prompt injection attacks on AI agents have become a growing concern. Security researchers have demonstrated hijacks against agents from Anthropic, Google, and Microsoft via their GitHub Actions integrations. All three paid bug bounties but published no public advisories. The underlying weakness is fundamental: LLMs cannot reliably separate data from instructions.

Lockdown Mode and Developer Mode cannot be used simultaneously. Turning one on disables the other. OpenAI also launched a separate session management feature that lets users review active ChatGPT sessions and log out of individual devices if they spot unauthorised activity.

The feature is a pragmatic concession. OpenAI is not claiming to have solved prompt injection. It is accepting that the problem persists and offering users a way to reduce their exposure by giving up functionality. For anyone handling sensitive data in ChatGPT, that trade-off is worth making. For everyone else, the expanding agent ecosystem and its growing attack surface mean the risk is only increasing.

Atlas Menu, a cheat service for popular online video game Grand Theft Auto V, has been hacked, according to data breach notification website Have I Been Pwned. 

The stolen data included users’ email addresses, usernames, scrambled passwords, IP addresses, and support tickets, according to Have I Been Pwned, which said almost 64,000 accounts were part of the breach.

Ironically, Atlas Menu claimed to offer “secure authentication and enhanced privacy through our advanced encryption techniques,” according to its official site, which is down at the time of writing.  

The hacker who claimed responsibility for the breach posted the allegedly stolen data on GitHub. The hacker’s motivation appeared to be revenge against a scammer. 

The owners of Atlas Menu could not be reached for comment.

Atlas Menu, according to a video posted on its website, for example offered features such as “invisibility;” “super jump,” which allowed the player to jump higher than normal; and the ability to fly through the map. 

The impact of the breach appears to expose users who signed up to Atlas Menu to cheat on the game. Game cheats have evolved into a multimillion-dollar business, as professional gamers seek an advantage over their competitors.

Atlas Menu is not the first cheat service to get hacked. A popular cheat service for Counter-Strike: Global Offensive was reportedly breached a few years ago.