OpenAI Lockdown Mode Targets Prompt Injection Data Exfiltration Vector

Forensic Summary

OpenAI has rolled out 'Lockdown Mode' for ChatGPT personal and self-serve business accounts, a deterministic control designed to block the data exfiltration leg of prompt injection attacks. The feature directly addresses the 'Lethal Trifecta' — the combination of private data access, untrusted content exposure, and an outbound exfiltration channel — by restricting outbound network requests at the infrastructure level rather than relying on AI-evaluated guardrails. Critically, OpenAI's own documentation acknowledges the feature's existence implies that default ChatGPT settings do not robustly prevent determined data exfiltration attacks.

Read the full technical deep-dive on Grid the Grey: https://gridthegrey.com/posts/openai-lockdown-mode-targets-prompt-injection-data-exfiltration-vector/