Connect with us

Technology

AI flaw leaked Gmail data before OpenAI patch

Published

on

AI flaw leaked Gmail data before OpenAI patch

NEWYou can now listen to Fox News articles!

A new cybersecurity warning reveals how hackers briefly weaponized ChatGPT’s Deep Research tool. The attack, called ShadowLeak, allowed them to steal Gmail data through a single invisible prompt — no clicks, no downloads and no user action required.

Researchers at Radware discovered the zero-click vulnerability in June 2025. OpenAI patched it in early August after being notified, but experts warn that similar flaws could reappear as artificial intelligence (AI) integrations expand across popular platforms like Gmail, Dropbox and SharePoint.

Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide — free when you join my CYBERGUY.COM/NEWSLETTER

HACKER EXPLOITS AI CHATBOT IN CYBERCRIME SPREE

Advertisement

Gmail data leaked in a zero-click attack requiring no user action.  (Kurt “CyberGuy” Knutsson)

How the ShadowLeak attack worked

Attackers embedded hidden instructions into an email using white-on-white text, tiny fonts or CSS layout tricks. The email looked completely harmless. But when a user later asked ChatGPT’s Deep Research agent to analyze a Gmail inbox, the AI unknowingly executed the attacker’s commands.

The agent then used its built-in browser tools to exfiltrate sensitive data to an external server, all within OpenAI’s own cloud environment, beyond the reach of antivirus or enterprise firewalls.

Unlike previous prompt-injection attacks that ran on the user’s device, ShadowLeak unfolded entirely in the cloud, making it invisible to local defenses.

GOOGLE CONFIRMS DATA STOLEN IN BREACH BY KNOWN HACKER GROUP

Advertisement

Hidden prompts expose how hackers silently hijacked ChatGPT’s AI agent. (Kurt “CyberGuy” Knutsson)

Why this threat matters

The Deep Research agent was designed to perform multistep research and summarize online data, but its wide access to third-party apps like Gmail, Google Drive and Dropbox also opened the door to abuse.

Radware researchers said the attack involved encoding personal data in Base64 and appending it to a malicious URL, disguised as a “security measure.” Once sent, the agent believed it was acting normally.

The real danger lies in the fact that any connector could be exploited the same way if attackers manage to hide prompts in analyzed content.

What security experts say

“The user never sees the prompt. The email looks normal, but the agent follows the hidden commands without question,” the researchers explained.

Advertisement

In a separate experiment, security firm SPLX showed another weakness: ChatGPT agents could be tricked into solving CAPTCHAs by inheriting a manipulated conversation history. Researcher Dorian Schultz noted that the model even mimicked human cursor movements, bypassing tests meant to block bots.

These incidents highlight how context poisoning and prompt manipulation can silently break AI safeguards.

GOOGLE AI EMAIL SUMMARIES CAN BE HACKED TO HIDE PHISHING ATTACKS

Experts warn future AI integrations could face the same hidden threat. (Kurt “CyberGuy” Knutsson)

How to protect yourself from ShadowLeak-style attacks

Even though OpenAI has patched the ShadowLeak flaw, it’s smart to stay proactive. Cybercriminals are always looking for new ways to exploit AI agents and integrations. So, taking these precautions now can help keep your accounts and personal data secure.

Advertisement

1) Turn off unused integrations

Every connection is a potential entry point. Disable any integrations you’re not actively using, such as Gmail, Google Drive or Dropbox. Fewer linked apps mean fewer ways for hidden prompts or malicious scripts to access your information.

2) Use a personal data removal service

Limit how much of your personal data is floating around the web. Data removal services can automatically remove your private details from people search sites and data broker databases, reducing what attackers can find and use against you. While no service can guarantee the complete removal of your data from the internet, a data removal service is really a smart choice. They aren’t cheap, and neither is your privacy. These services do all the work for you by actively monitoring and systematically erasing your personal information from hundreds of websites. It’s what gives me peace of mind and has proven to be the most effective way to erase your personal data from the internet. By limiting the information available, you reduce the risk of scammers cross-referencing data from breaches with information they might find on the dark web, making it harder for them to target you.

Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting Cyberguy.com.

Get a free scan to find out if your personal information is already out on the web: Cyberguy.com.

3) Avoid analyzing unknown content

Treat every email, attachment or document with caution. Don’t ask AI tools to analyze content from unverified or suspicious sources. Hidden text, invisible code or layout tricks could trigger silent actions that expose your private data.

Advertisement

4) Watch for security updates

Stay alert for updates from OpenAI, Google, Microsoft and other platforms. Security patches close newly discovered vulnerabilities before hackers can exploit them. Turn on automatic updates so you’re always protected without having to think about it. 

5) Use strong antivirus software

A strong antivirus program adds another wall of defense. These tools detect phishing links, hidden scripts and AI-driven exploits before they cause harm. Schedule regular scans and keep your protection up to date.

The best way to safeguard yourself from malicious links that install malware, potentially accessing your private information, is to have strong antivirus software installed on all your devices. This protection can also alert you to phishing emails and ransomware scams, keeping your personal information and digital assets safe.

Get my picks for the best 2025 antivirus protection winners for your Windows, Mac, Android and iOS devices at Cyberguy.com.

6) Use layered protection

Think of your security like an onion; more layers make it tougher to breach. Keep your browser, operating system and endpoint security software fully updated. Add real-time threat detection and email filtering to block malicious content before it lands in your inbox.

Advertisement

Kurt’s key takeaways

AI is evolving faster than most security systems can keep up with. Even when companies move quickly to patch vulnerabilities, clever attackers find new ways to exploit integrations and context memory. Staying alert and limiting what your AI agents can access is your best defense.

Would you still trust an AI assistant with access to your personal email after learning how easily it can be tricked? Let us know by writing to us at Cyberguy.com..

Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide — free when you join my CYBERGUY.COM newsletter.

Copyright 2025 CyberGuy.com.  All rights reserved.

Advertisement
Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Technology

Blue Origin successfully reused its New Glenn rocket

Published

on

Blue Origin successfully reused its New Glenn rocket

Today’s launch of AST SpaceMobile’s BlueBird 7 satellite aboard Blue Origin’s reusable New Glenn rocket was a partial success. The New Glenn touched down on its landing pad without incident, making it the second launch and landing for the first stage booster, and officially giving Jeff Bezos a reusable launch vehicle. Unfortunately for AST SpaceMobile, the mission was less successful. Its cell-tower-in-space was delivered to a lower orbit than expected by the second stage of the launch vehicle, rendering it functionally useless.

While the satellite separated from the launch vehicle and powered on, the altitude is too low to sustain operations with its on-board thruster technology and will de-orbited.

Bezos, for his part, posted a video of the landing on X without comment.

Continue Reading

Technology

iPhone and Samsung flashlight tricks you should know

Published

on

iPhone and Samsung flashlight tricks you should know

NEWYou can now listen to Fox News articles!

Most people treat their phone flashlight like a basic on and off switch. You tap it when you drop something under the couch or walk through a dark parking lot. That’s it.

But with the latest software updates, both iPhone and Samsung phones have quietly turned the flashlight into something much more useful. You can control how bright it is. On some devices, you can even change how wide the beam spreads.

Once you know where to look, it feels like you just upgraded your phone without spending a dollar.

10 IOS 26 TRICKS THAT HELP YOU GET MORE OUT OF YOUR IPHONE

Advertisement

Both iPhone and Samsung phones have quietly turned the flashlight into something much more useful. (Silas Stein/picture alliance)

iPhone flashlight features you’re probably missing

Your iPhone flashlight does more than turn on and off, and a few hidden controls can completely change how you use it.

How to adjust iPhone flashlight brightness

On almost all iPhones:

  • Swipe down from the top right to open Control Center
  • Press and hold the flashlight icon
  • Drag the vertical slider up to increase brightness or down to lower it

This has been around for years, but many people still tap instead of holding. That’s where the real control lives.

How to change iPhone flashlight beam width (Pro models)

This is the feature most people have never seen. On newer Pro iPhones running the latest software:

  • Swipe down to open Control Center
  • Press and hold the flashlight icon
  • When the flashlight control appears at the top of the screen, swipe left or right to adjust the beam width

You can go from a narrow, focused beam to a wide flood of light.

That means:

Advertisement
  • Narrow beam = better for seeing farther ahead
  • Wide beam = better for lighting up a full area

This feature was introduced in iOS 18 and is still available in iOS 26.4, but it only works on iPhone 14 Pro and newer Pro models, including iPhone 15 Pro and later versions. You won’t see it on standard models.

How to turn on iPhone flashlight from the Lock Screen

You don’t even need to unlock your phone:

  • Press and hold the flashlight icon on the Lock Screen

It turns on instantly, which is faster than digging through menus.

How to use Siri to control your iPhone flashlight

You can say:

  • Hey Siri, turn on the flashlight.”
  • “Set flashlight to 50 percent.”
  • Hey Siri, turn off the flashlight.”

It’s one of the fastest hands-free options when your hands are full.

The flashlight is one of the most used features on your phone, yet most people never go beyond the basics. (Anna Barclay/Getty Images)

Bonus: Use iPhone flashlight for alerts and notifications

Your iPhone can use the flashlight as a visual alert:

  • Go to Settings
  • Tap Accessibility
  • Tap Audio/Visual
  • Scroll down and turn on Flash for Alerts

Your flashlight will blink for calls and notifications, which helps if your phone is on silent or in a noisy place.

Samsung flashlight features you should know

Samsung takes a different approach and, in some ways, gives you more flexibility right out of the box.

Advertisement

Note: Settings may vary depending on your Samsung device model and One UI version.

How to adjust Samsung flashlight brightness

On most Samsung Galaxy phones:

  • Swipe down to open Quick Settings
  • Press and hold the flashlight icon
  • Use the brightness slider (labeled “Brightness”) to adjust the light level

Many people miss this because a quick tap only turns the flashlight on or off. The brightness controls appear after you press and hold, giving you more control depending on your situation.

How to turn on the Samsung flashlight with your voice

If you use Google Assistant:

  • “Hey Google, turn on the flashlight.”
  • “Hey Google, turn off the flashlight.”

It works well when your hands are full or when you need quick access.

10 INCREDIBLY USEFUL IPHONE AND ANDROID TRICKS THAT MAKE YOUR LIFE EASIER

How to customize Samsung flashlight access

Samsung gives you a few ways to keep the flashlight within easy reach. To keep it in your main Quick Settings panel:

Advertisement
  • Swipe down from the top of the screen to open Quick Settings
  • If you do not see the flashlight icon in the main panel, tap the pencil icon to edit
  • Tap Edit 
  • Find Flashlight in the available buttons
  • Hold and drag the flashlight icon  into the main Quick Settings area
  • Tap Done or Save if prompted

Bonus: Use the Samsung flashlight for alerts and notifications

Samsung phones can also use the flashlight for visual alerts:

  • Go to Settings
  • Tap Accessibility
  • Tap Advanced settings
  • Tap Flash notifications
  • Turn on Camera flash notification

You can also turn on Screen flash notification if you want your display to light up instead.

When iPhone and Samsung flashlight features actually matter

This is where it becomes practical:

  • Walking at night: a narrow beam helps you see farther ahead
  • Power outage: a wide beam lights up more of the room
  • Looking for something nearby: lower brightness avoids harsh glare
  • Emergency situations: faster access can save time

Once you start adjusting the light instead of just turning it on, it becomes far more useful.

Take my quiz: How safe is your online security?

Think your devices and data are truly protected? Take this quick quiz to see where your digital habits stand. From passwords to Wi-Fi settings, you’ll get a personalized breakdown of what you’re doing right and what needs improvement. Take my Quiz here: Cyberguy.com   

Apple improved control with hardware and software, while Samsung focused on flexibility and customization. (Kurt “CyberGuy” Knutsson)

Kurt’s key takeaways

The flashlight is one of the most used features on your phone, yet most people never go beyond the basics. Apple improved control with hardware and software, while Samsung focused on flexibility and customization. Both approaches make a simple tool far more capable.

Have you ever discovered a hidden feature on your phone that made you wonder what else you’ve been missing? Let us know by writing to us at Cyberguy.com

Advertisement

Sign up for my FREE CyberGuy Report

CLICK HERE TO DOWNLOAD THE FOX NEWS APP

  • Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
  • For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com trusted by millions who watch CyberGuy on TV daily.
  • Plus, you’ll get instant access to my Ultimate Scam Survival Guide free when you join.

Copyright 2026 CyberGuy.com.  All rights reserved. 

Advertisement
Continue Reading

Technology

The future of local TV news has taken a Trumpian turn

Published

on

The future of local TV news has taken a Trumpian turn

This is The Stepback, a weekly newsletter breaking down one essential story from the tech world. For more stories on Big Tech versus politics in Washington, DC, follow Tina Nguyen and read Regulator. The Stepback arrives in our subscribers’ inboxes at 8AM ET. Opt in for The Stepback here.

A long time ago, in 2004, the Federal Communications Commission laid down a rule designed to prevent a monopoly: No one company could broadcast to more than 39 percent of all the TV households in the United States. But then Donald Trump returned to the White House in 2025. Brendan Carr became FCC chairman and immediately kicked off a deregulatory initiative called “Delete, Delete, Delete,” in which Carr vowed to get rid of “every rule, regulation, or guidance document” that placed “unnecessary regulatory burdens” on companies. And within months, Nexstar, which already owned over 200 stations nationwide and had hit its ownership cap, announced that it had entered an agreement to purchase its rival, Tegna, for an estimated $6.2 billion — something that could only happen, however, if Carr agreed to change the FCC’s rules.

If you ask Nexstar why it’s pursuing a merger that would give it control of over 80 percent of the market, it’d point to Big Tech as the culprit. As advertisers take their money to Netflix, YouTube, and other digital streamers, linear television — the local television news, the broadcast affiliates, the basic cable networks — has suffered, forcing them to consolidate and shut down newsrooms. In that sense, Nexstar argued, the merger would help it compete for ad revenue with the streaming services, thereby building more robust local journalism. However, the merger’s opponents believe that this is a basic violation of antitrust laws and principles — not to mention the danger of letting one company have editorial control over the vast majority of America’s local television newsrooms.

But the second Trump administration handles regulatory hurdles a little differently than others, and companies have found that it’s faster to get what they want if they bypass the agencies and talk (read: suck up) to Trump directly. And when Nexstar did so publicly, it confirmed its opponents’ fears about political influence. Last September, in the fraught weeks after the fatal shooting of Charlie Kirk, Nexstar announced it would no longer broadcast Jimmy Kimmel Live! — a response to Carr’s claim that the FCC could revoke the broadcast licenses of TV stations that aired the comedian’s comments related to Kirk. It briefly led to ABC suspending Kimmel’s show, though ABC and Nexstar soon reversed their decision after a massive nationwide backlash and an ABC boycott.

However, Nexstar’s loyalty to Trump himself was not enough to win over his most powerful MAGA supporters. Newsmax, a cable news network with a deeply pro-Trump bent, and its CEO, longtime Trump donor and outside adviser Chris Ruddy, filed a lawsuit objecting to the merger, claiming that Nexstar’s anticompetitive behavior would force channels like his off the air with steeper carriage fees. He specifically accused Nexstar of jacking up the fees for stations to carry Newsmax, while offering its similar network, NewsNation, for much cheaper.

Advertisement

The Nexstar-Tegna MAGA makeover then took a more subtle turn. NewsNation hired the pro-Trump Fox News commentator Katie Pavlich and gave her her own primetime show. (The network had already hired a slew of former Fox journalists as well.) Around this time, a political group called Keep News Local began airing ads in DC that seemed to directly address Trump, praising him for having “defeated the fake news monopolies before through independent voices and local news” and claiming that the Nexstar-Tegna merger was “crucial for MAGA to survive.” (A little self-contradictory and mildly illogical, but it’s the kind of stuff that Trump likes to hear.) When I last spoke to Ruddy in February, I asked if he’d worried that the dark money going into Keep News Local would sway Trump, and he chose his words carefully: “I think at the end of the day, Trump makes up his own mind. I’m not sure he’s going to be influenced by an ad campaign.”

For months, no one could accurately predict if Trump would override Carr’s wishes and bless the deal, as he’s often done for other companies facing regulatory scrutiny. Trump’s Truth Social posts about the merger have been a good indicator of how precarious the merger has been and who’s been able to influence him at any given moment: Last November, he blasted the deal as an “EXPANSION OF THE FAKE NEWS NETWORKS,” but by February, he posted that the deal would “help knock out the Fake News because there will be more competition.”

Several current and former NewsNation employees told Status at the time that they feared that the parent company was steering NewsNation away from the centrist, “unbiased” reputation they’d long cultivated. “A lot of people within the network believe that the network has gone hard right to appeal to Trump and Brendan Carr,” one former employee told Status. Coincidentally, days before the deal was finalized, NewsNation began ramping up its explicitly pro-Trump content, tweeting a clip of CNN’s Kaitlan Collins being berated by White House press secretary Karoline Leavitt, along with the comment “Just going to leave this here.”

When Trump greenlit the merger in mid-March, but before the FCC’s three commissioners could vote on whether to waive the ownership cap, Nexstar and Tegna immediately announced a new complication: Tegna and Nexstar had already started merging. Tegna was no more and CEO Mike Steib had already sold $22.6 million of his company stock.

In response, eight state attorneys general and satellite TV operator DirectTV, which had already been planning to file separate federal antitrust suits against the merger, asked US District Judge Troy Nunley in Sacramento for an emergency restraining order that would prevent Nexstar from taking over Tegna’s assets. The order was granted on March 27th and on April 17, Nunley issued a formal injunction, ruling that Tegna must be operated as an independent financial entity, and Nexstar must take steps to ensure it remains separate from Tegna before further legal proceedings.

Advertisement

For now, Nunley has allowed the states and DirecTV to combine their cases, in which both argue that the merger was a clear violation of antitrust laws and would crush news competition.

Meanwhile, Republicans and Democrats in Congress are furious at Carr. On March 30th, Sens. Ted Cruz (R-TX) and Maria Cantwell (D-WA) sent the chairman a joint letter admonishing him for allowing his staff to waive the regulations to let the merger pass, instead of having the full commission of political appointees — one from the Biden administration — vote on it. “Under these circumstances,” they wrote, “any subsequent vote risks being largely procedural rather than a genuine exercise of commission responsibility.” They also pointed out that their hasty approval without the commission’s approval would now complicate the merger financially: “In a transaction of this scale, where integration proceeds quickly and unwinding becomes impractical, delay in judicial review can insulate the decision from meaningful challenge.” Notably, though they share similar ideological views on the media and deregulation, Cruz and Carr have frequently clashed over how to achieve their objectives. Cruz previously slammed Carr as a “mafioso,” for instance, for the way he’d used the FCC to silence Kimmel.

But even if it’s legally paused, the journalistic merger’s fallout has started to hit local news. NPR’s David Folkenfirk reported on Tuesday that Tegna journalists had already started receiving orders to stop broadcasting content from major broadcasters like ABC, CBS, and NBC — media outlets being targeted by Carr — and instead begin airing content from Nexstar’s NewsNation.

  • Brendan Carr’s views on using the FCC to punish major broadcasters was outlined pretty extensively in the chapter he authored in Project 2025, an initiative led by the conservative Heritage Foundation on how to reform the federal bureaucracy to be more favorable to the American right.
  • Exactly how much is local television losing to digital? According to industry publication NewscastStudio, in an investor call defending the purchase, Nexstar chairman Perry Sook cited a market research study from Borrell Associates, which found that “digital advertising in local markets exceeds $100 billion, compared to just $25 billion for local linear television advertising, with nearly two-thirds of digital ad dollars flowing to five major technology companies.”
  • If you want to see exactly how much Keep Local News was trying to suck up to Trump, the ads are archived here.
  • The Vergecast has a long-running segment called “Brendan Carr is a dummy.”
  • The LA Times reported on last week’s preliminary hearings in front of Nunley, and how lawyers for Nexstar, the states, and DirecTV plan to argue their case.
  • The Desk has insights from Kirk Varner, a former TV newsroom director, on how the case could go.
  • Andrew Liptak covered Nexstar’s previous acquisition sprees for The Verge in 2018.
  • Adi Robertson walks through exactly how the Kimmel suspension was an attack on free speech.
  • Brendan Carr keeps trying to convince people that he’s not threatening to suspend broadcast licenses for reporting on unfavorable things like the Iran war, reports Lauren Feiner.
  • The Vergecast has a long-running segment called “Brendan Carr is a dummy.”
Follow topics and authors from this story to see more like this in your personalized homepage feed and to receive email updates.

Continue Reading
Advertisement

Trending