Technology
AI flaw leaked Gmail data before OpenAI patch
NEWYou can now listen to Fox News articles!
A new cybersecurity warning reveals how hackers briefly weaponized ChatGPT’s Deep Research tool. The attack, called ShadowLeak, allowed them to steal Gmail data through a single invisible prompt — no clicks, no downloads and no user action required.
Researchers at Radware discovered the zero-click vulnerability in June 2025. OpenAI patched it in early August after being notified, but experts warn that similar flaws could reappear as artificial intelligence (AI) integrations expand across popular platforms like Gmail, Dropbox and SharePoint.
Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide — free when you join my CYBERGUY.COM/NEWSLETTER
HACKER EXPLOITS AI CHATBOT IN CYBERCRIME SPREE
Gmail data leaked in a zero-click attack requiring no user action. (Kurt “CyberGuy” Knutsson)
How the ShadowLeak attack worked
Attackers embedded hidden instructions into an email using white-on-white text, tiny fonts or CSS layout tricks. The email looked completely harmless. But when a user later asked ChatGPT’s Deep Research agent to analyze a Gmail inbox, the AI unknowingly executed the attacker’s commands.
The agent then used its built-in browser tools to exfiltrate sensitive data to an external server, all within OpenAI’s own cloud environment, beyond the reach of antivirus or enterprise firewalls.
Unlike previous prompt-injection attacks that ran on the user’s device, ShadowLeak unfolded entirely in the cloud, making it invisible to local defenses.
GOOGLE CONFIRMS DATA STOLEN IN BREACH BY KNOWN HACKER GROUP
Hidden prompts expose how hackers silently hijacked ChatGPT’s AI agent. (Kurt “CyberGuy” Knutsson)
Why this threat matters
The Deep Research agent was designed to perform multistep research and summarize online data, but its wide access to third-party apps like Gmail, Google Drive and Dropbox also opened the door to abuse.
Radware researchers said the attack involved encoding personal data in Base64 and appending it to a malicious URL, disguised as a “security measure.” Once sent, the agent believed it was acting normally.
The real danger lies in the fact that any connector could be exploited the same way if attackers manage to hide prompts in analyzed content.
What security experts say
“The user never sees the prompt. The email looks normal, but the agent follows the hidden commands without question,” the researchers explained.
In a separate experiment, security firm SPLX showed another weakness: ChatGPT agents could be tricked into solving CAPTCHAs by inheriting a manipulated conversation history. Researcher Dorian Schultz noted that the model even mimicked human cursor movements, bypassing tests meant to block bots.
These incidents highlight how context poisoning and prompt manipulation can silently break AI safeguards.
GOOGLE AI EMAIL SUMMARIES CAN BE HACKED TO HIDE PHISHING ATTACKS
Experts warn future AI integrations could face the same hidden threat. (Kurt “CyberGuy” Knutsson)
How to protect yourself from ShadowLeak-style attacks
Even though OpenAI has patched the ShadowLeak flaw, it’s smart to stay proactive. Cybercriminals are always looking for new ways to exploit AI agents and integrations. So, taking these precautions now can help keep your accounts and personal data secure.
1) Turn off unused integrations
Every connection is a potential entry point. Disable any integrations you’re not actively using, such as Gmail, Google Drive or Dropbox. Fewer linked apps mean fewer ways for hidden prompts or malicious scripts to access your information.
2) Use a personal data removal service
Limit how much of your personal data is floating around the web. Data removal services can automatically remove your private details from people search sites and data broker databases, reducing what attackers can find and use against you. While no service can guarantee the complete removal of your data from the internet, a data removal service is really a smart choice. They aren’t cheap, and neither is your privacy. These services do all the work for you by actively monitoring and systematically erasing your personal information from hundreds of websites. It’s what gives me peace of mind and has proven to be the most effective way to erase your personal data from the internet. By limiting the information available, you reduce the risk of scammers cross-referencing data from breaches with information they might find on the dark web, making it harder for them to target you.
Check out my top picks for data removal services and get a free scan to find out if your personal information is already out on the web by visiting Cyberguy.com.
Get a free scan to find out if your personal information is already out on the web: Cyberguy.com.
3) Avoid analyzing unknown content
Treat every email, attachment or document with caution. Don’t ask AI tools to analyze content from unverified or suspicious sources. Hidden text, invisible code or layout tricks could trigger silent actions that expose your private data.
4) Watch for security updates
Stay alert for updates from OpenAI, Google, Microsoft and other platforms. Security patches close newly discovered vulnerabilities before hackers can exploit them. Turn on automatic updates so you’re always protected without having to think about it.
5) Use strong antivirus software
A strong antivirus program adds another wall of defense. These tools detect phishing links, hidden scripts and AI-driven exploits before they cause harm. Schedule regular scans and keep your protection up to date.
The best way to safeguard yourself from malicious links that install malware, potentially accessing your private information, is to have strong antivirus software installed on all your devices. This protection can also alert you to phishing emails and ransomware scams, keeping your personal information and digital assets safe.
Get my picks for the best 2025 antivirus protection winners for your Windows, Mac, Android and iOS devices at Cyberguy.com.
6) Use layered protection
Think of your security like an onion; more layers make it tougher to breach. Keep your browser, operating system and endpoint security software fully updated. Add real-time threat detection and email filtering to block malicious content before it lands in your inbox.
Kurt’s key takeaways
AI is evolving faster than most security systems can keep up with. Even when companies move quickly to patch vulnerabilities, clever attackers find new ways to exploit integrations and context memory. Staying alert and limiting what your AI agents can access is your best defense.
Would you still trust an AI assistant with access to your personal email after learning how easily it can be tricked? Let us know by writing to us at Cyberguy.com..
Sign up for my FREE CyberGuy Report
Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox. Plus, you’ll get instant access to my Ultimate Scam Survival Guide — free when you join my CYBERGUY.COM newsletter.
Copyright 2025 CyberGuy.com. All rights reserved.
Technology
Valve says it’s ready to launch the Steam Machine this summer
Valve now says that the delayed Steam Machine PC and Steam Frame VR headset are set to launch sometime this summer. In a Thursday blog post detailing its Verified programs for both pieces of hardware, Valve concludes by saying that “We’re excited for players to try your titles on the new Steam hardware once they launch this summer.”
When the company originally announced the Machine and Frame alongside its new Steam Controller late last year, it said that it would start shipping the new gadgets in early 2026. But in February, the company announced that the ongoing memory and storage crunch had forced it to revisit its pricing and shipping plans. And in March, Valve said in a blog post that it would be “shipping all three products this year” — though that was after the company initially said in the post that “we hope to ship in 2026,” which it removed in an update.
Valve opted to release the Steam Controller on its own, putting it up for sale in early May. For the Machine and Frame, while “summer” isn’t exactly a specific date, it narrows the window for when the products might finally come out.
Ahead of actually launching the devices, Valve is redesigning the Steam store and sharing information about the Verified programs for the hardware so that developers can prepare their games. Like with the Steam Deck, if a game is verified for the Machine or the Frame, the badge signals that the game should work well without any tweaks from the user.
For the Machine, the requirements for a game to be verified are “nearly identical” to what they are for the Steam Deck. With the Machine being “roughly six times as powerful” as the Deck, in theory, many more games will be verified for it. Valve also says that it’s testing “every title on Machine that fell below our performance requirements on Deck.”
For the Frame, Valve’s verified badge will signify games that run well while being played natively on the headset — as opposed to games that work well streamed to the headset, which the Frame is also capable of. “Like Steam Deck Verified, the Steam Frame Standalone Verified program focuses on the experience customers will have with the device out-of-the-box in standalone mode,” Valve says.
Now, we just need Valve to share exactly when the Steam Machine and Steam Frame will be released and how much they might cost. After last week’s price hikes for the Steam Deck, I’m gearing up for sticker shock.
Technology
Are humanoid robots now coming for retail jobs?
NEWYou can now listen to Fox News articles!
Humanoid robots just got another real job. This time, they are clocking in behind the scenes at a major retail operation. Figure AI has signed a commercial agreement with Catalyst Brands. That is the company behind JCPenney, Aéropostale, Brooks Brothers, Eddie Bauer, Lucky Brand and Nautica.
The first rollout begins at Catalyst’s Reno, Nevada Distribution Logistics Center. So, no, these robots are not greeting shoppers or folding jeans in the store aisle. At least not yet.
For now, they are heading into warehouse and supply chain work. Still, the announcement has some people worried. Many see humanoid robots entering a workplace and immediately wonder what happens to human jobs. That concern is fair.
Join CyberGuy Live: Lock Down Your Phone in 30 Minutes (Saturday, June 13, 10 am ET)
- Your phone holds your email, passwords, photos, banking apps and personal data. In this free, live online class, Kurt the CyberGuy will walk you step by step through simple phone security fixes you can do in real time. You’ll learn how to improve your privacy settings, spot the latest phone scams, use trusted security tools and walk away with a simple checklist to stay protected. Register here: CyberGuyLive.com.
THE AI-POWERED ROBOT ARMY THAT PACKS YOUR GROCERIES IN MINUTES
Figure’s humanoid robots are starting behind the scenes in Catalyst Brands’ Reno warehouse, not on the store floor. (Figure AI)
Figure’s humanoid robots enter warehouse work
Catalyst Brands says Figure’s humanoid robots will help with supply chain work. The companies say the robots will focus on repetitive, physically demanding sorting and packing tasks. In other words, this starts with warehouse work that can wear people down over time. The robots will first assist with Catalyst’s Joey Pouch sorting system in Reno. That system helps with computerized induction, sorting and packing inside the facility. Catalyst says the Reno site also underwent a $40 million infrastructure update in 2024.
“As we invest in and scale our portfolio, this collaboration with Figure shows how emerging technologies can modernize our operations while strengthening our workforce,” said Marc Rosen, CEO of Catalyst Brands. “When we automate routine tasks, our associates can focus on higher-value work and better serve our customers across all our brands.”
So, this is happening behind the scenes in the warehouse, not on the store floor. That detail is important, especially because some online reactions made it sound like robots were already headed into retail stores. The announcement points to warehouse operations first. Still, warehouse jobs are real jobs. That is why this deal is getting so much attention.
Why the Figure AI and Catalyst Brands deal stands out
Catalyst Brands owns several major retail brands and operates a large retail network. Figure AI also describes this as a step toward deploying humanoid robots at scale, even though it has not said how many robots will be used.
There is also a financial connection behind the scenes. Brookfield is an investor in Figure AI and also has a stake in Catalyst Brands. Figure says this is the first commercial bridge between Figure and a Brookfield portfolio company.
If the robots perform well in Reno, the companies could look for more ways to use them across the business.
AI LAYOFFS MAY BE BACKFIRING ON COMPANIES
The robots will first assist with repetitive sorting and packing work inside Catalyst’s updated distribution center. (Figure AI)
What Figure AI has not revealed yet
The announcement leaves out several key details. We do not know how many robots Figure AI will deploy. We do not know the exact start date. We also do not know whether Catalyst is buying the robots, leasing them or using a robots-as-a-service model. The companies have also not said how many human roles could change because of the rollout.
Figure AI says the robots are being integrated into Catalyst’s distribution facility and will focus on physically demanding work. However, the release does not spell out the exact jobs the robots will handle day to day.
That missing information gives people room to worry. It also gives people room to guess. And online, people did both. Some thought humanoid robots were coming straight into stores. Others focused on the bigger fear, which is that robots could take over jobs that people depend on.
Why humanoid robots make workers nervous
The fear around this deal goes beyond one company. Workers have already watched companies use AI to cut costs, slow hiring and reorganize teams. Now, physical robots are entering spaces where people lift, sort, pack and move products. That feels different.
Figure AI and Catalyst say the robots can handle routine tasks and help associates shift toward higher-value work. That sounds promising. However, workers may hear a very different message. They may wonder who gets retrained. They may also wonder who gets replaced. Companies cannot brush off those concerns. If humanoid robots are coming into more workplaces, workers deserve clear answers.
JOBS THAT ARE MOST AT RISK FROM AI, ACCORDING TO MICROSOFT
The big question is whether humanoid robots will help workers handle tough warehouse tasks or eventually replace some of those jobs. (Figure AI)
Why retail companies want warehouse robots
Warehouse work can be tough on the body. People lift boxes, move products, repeat the same motions and race to keep up when orders spike. That is why retail companies are looking hard at automation.
Figure’s pitch is that humanoid robots can fit into places already built for people. They do not need a warehouse rebuilt from scratch. In theory, they can step into certain jobs and help with repetitive work.
For a retailer, that could mean products move faster, and workers face less physical strain. It could also help during busy shopping seasons, when distribution centers get slammed.
What to watch next with Figure AI robots
The next big signal will be whether Catalyst expands the robot program beyond Reno. A small rollout may be a learning test. A wider deployment would point to a much larger shift in how retailers move products.
Watch for details on robot count, job duties and worker impact. Those specifics will tell us more than anything else. Also, pay attention to how companies talk about employees. If they say robots will help workers move into better roles, they should explain exactly how that will happen. Workers deserve more than buzzwords.
What this means for you
These robots may start in a warehouse, but the ripple effect could eventually reach workers, shoppers and prices.
For shoppers, the upside is easy to see. If robots help move products faster, stores may have fewer empty shelves. Online orders could also move through warehouses more quickly.
For workers, it gets more complicated. Companies often say robots will take over the hardest tasks so people can move into better roles. That sounds good, but workers need more than a promise. They need training. They need clear answers. They also need to know whether a robot is there to help them or replace them.
And for the rest of us, this raises a bigger question. Are we comfortable with retailers using humanoid robots if it makes shopping faster or cheaper? Or do we want companies to prove that people are still part of the plan?
Kurt’s key takeaways
Figure AI’s deal with Catalyst Brands shows how quickly humanoid robots are entering our workplaces. For now, these robots are starting in a distribution center. They are not walking through the aisles at JCPenney. That distinction is important. Still, the bigger concern remains. People want to know whether these machines will help workers or slowly push them aside. Automation can reduce hard physical work. It can also create real fear when companies avoid direct answers. Humanoid robots may soon become a normal part of warehouse operations for retailers. The real test will be whether companies use them in a way that helps people, instead of treating people like a cost to cut.
Would you shop with a retailer that uses humanoid robots in its warehouses, or would that make you think twice? Let us know by writing to us at CyberGuy.com.
CLICK HERE TO DOWNLOAD THE FOX NEWS APP
Sign up for my FREE CyberGuy Report
- Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
- For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com – trusted by millions who watch CyberGuy on TV daily.
- Plus, you’ll get instant access to my Ultimate Scam Survival Guide free when you join.
Copyright 2026 CyberGuy.com. All rights reserved.
Technology
Cyberdecks used to look like little laptops, but now they’re getting more personal
Tan and countless other DIYers are attracting millions of views showing off the personal computers they’ve built inside purses, jewelry boxes, toys, and old tech, hiding Raspberry Pi boards inside art projects.
Cyberdecks, but make it fashion
The colorful, quirky builds popping up across social media are a drastic shift away from the typical look the cyberdecks we’ve featured have had, which often consisted of a 3D-printed chassis or a rugged box like a Pelican case, usually with a cyberpunk-style design.
Inside, these homemade devices are essentially mini Linux computers for specific tasks, usually done offline, like reading, journaling, or listening to music. But now, a cyberdeck doesn’t have to look like a computer at all.
-
Colorado8 minutes agoImagine a world where the Colorado gas pump knows your credit score (Letters)
-
Connecticut11 minutes agoEarly morning forecast for June 5
-
Delaware16 minutes agoRecovery mission underway on Delaware River after Philadelphia barber goes missing in the water
-
Florida23 minutes agoSouth Florida to see rising temperatures this weekend as rain chances start to drop
-
Georgia26 minutes agoUS Congressional Committee Approves Two Amendments on Georgia to Defense Budget – SOVA
-
Hawaii31 minutes agoEminent domain resolution advances – West Hawaii Today
-
Idaho38 minutes agoBan of Kratom sales passed unaminously in Idaho Falls – Local News 8
-
Illinois40 minutes agoTruck engulfed in flames on I-294 near Oak Brook, shutting down multiple lanes, police say: VIDEO