Check Point details a now-patched bypass of ChatGPT Lockdown Mode that allowed silent chat theft
Researchers say popups from HTML previews in code blocks escaped nested sandboxed frames, enabling zero-click exfiltration in the ChatGPT desktop app, phishing and malware lures; OpenAI fixed the flaw on September 18, 2026.