Researchers Uncover Prompt Adware Hidden in OpenAI Codex Jailbreak Toolkit

The Hacker News · By info@thehackernews.com (The Hacker News) · 2d ago

Cybersecurity researchers have disclosed details of an OpenAI Codex jailbreak bundle that's designed to modify an artificial intelligence (AI) agent's trusted instructions to insert advertisements for a third-party AI gateway. The phenomenon has been codenamed prompt adware by…

Read the full story at thehackernews.com ↗

The Brief

Researchers disclosed an OpenAI Codex jailbreak bundle that modifies an AI agent's trusted instructions to insert advertisements for a third-party AI gateway.
The technique has been codenamed prompt adware.

Why it matters

Untrusted jailbreak tools can silently alter the instructions an AI coding agent treats as trusted, changing its behaviour and injecting third-party content without the developer's knowledge.

Who’s affected

Developers using OpenAI Codex
Anyone installing Codex jailbreak tools

What to do

Avoid installing unverified Codex jailbreak bundles

#codex
#prompt-adware
#ai-agents
#malware
#supply-chain

Timeline

Nov 4
Researchers disclose the prompt adware hidden in the Codex jailbreak bundle
Nov 4 · 4:06 PM
The Hacker News
Researchers Uncover Prompt Adware Hidden in OpenAI Codex Jailbreak Toolkit

How do you feel about this?

0 Comments

More in Security

Security · High impact

Debian and Ubuntu APT Flaw Lets MitM Attackers Swap Verified Packages and Run Code as Root

A flaw in APT, the package manager for Debian and Ubuntu, allows an attacker who can modify package downloads to swap a checked package for their own. The attacker's code then runs as root, according to advisories that Debian, Ubuntu, and APT's developers published on November 4…

The Hacker News · info@thehackernews.com (The Hacker News) · 2d ago · 2 sources · 💬 78

Security · High impact

Zyxel fixes zero-day exploited to hack nearly 1,000 network switches

Zyxel has patched a zero-day vulnerability in its GS1900 series network switches that hackers exploited to compromise nearly 1,000 devices worldwide and steal configuration files and credentials. [...]

BleepingComputer · Lawrence Abrams · 2d ago · 3 sources

Security · High impact

APT29-Linked Hackers Hijack Web Analytics Script to Deliver iOS and Android Exploits

The Russia-linked threat actor known as APT29 is presumed to be behind a large-scale watering hole campaign targeting iOS and Android users through compromised websites, fake domains, and a supply chain attack involving a Ukrainian web analytics service called Plerdy SEO Tracker…

The Hacker News · info@thehackernews.com (The Hacker News) · 2d ago · 3 sources

Security · High impact

More Asian airlines announce data breaches after attack on Spanish IT provider Amadeus

Japan Airlines, Cathay Pacific, Korean Air, Asiana Airlines, Singapore Airlines and Malaysia Airlines have all come forward over the last week to report data breaches traced back to Amadeus IT Group — a company that builds and maintains platforms for flight reservation, ticketing…

The Record from Recorded Future News · 2d ago · 2 sources