Exposing the Hidden Dangers of AI Search
ChatGPT Search Vulnerability Exposed: Hidden Text Manipulation
Researchers have unveiled how ChatGPT Search can be manipulated using hidden text on webpages. This technique leverages the AI's Retrieval Augmented Generation (RAG) to override visible content with concealed instructions, leading to potential misinformation. This vulnerability is not unique to ChatGPT but has been sighted in other AI models as well.
Introduction to ChatGPT Search Vulnerability
Mechanics of Hidden Text Manipulation
Comparative Vulnerabilities in AI Models
Impacts and Risks of AI Manipulation
OpenAI's Response to the Exploit
Methods to Manipulate AI Search Engines
Similar Vulnerabilities in Other AI Platforms
Public Reaction to the Vulnerability
Expert Opinions on AI Security Risks
Implications for the Future of AI Search
Conclusion and Mitigation Strategies
Sep 30, 2026
ChatGPT Space replaces Library for eligible users, while Projects stay separate
OpenAI's DevDay launch gives teams a shared home for pages and files. The current help guide draws important lines around Projects, mobile editing, inherited access and automatic page updates.
Sep 30, 2026
ChatGPT plugins can now react to MCP events, with signed webhooks and clear limits
OpenAI's DevDay MCP Events launch lets a plugin start a ChatGPT workflow when its server reports a relevant change. The current integration uses verified, signed webhooks and leaves several mechanisms in the broader draft specification unsupported.
Sep 30, 2026
ChatGPT Sites can host plugins, but each visitor uses their own connection
OpenAI’s DevDay update brings supported plugins into Sites for workspaces. Builders still need to account for admin controls, visitor consent and limits on background access.
Related News
Oct 30, 2026
Cognizant forms OpenAI delivery group for code, legacy systems and customer operations
The October 30 practice announcement brings together more than 25,000 professionals. Its three initial workstreams include modernization with consequential engineering review.
Oct 29, 2026
OpenAI’s subscription API credits have separate eligibility and expiry rules
The October 28 benefit connects eligible Pro or Business subscriptions to an owned API organization. Subscription eligibility, credit expiry and Codex exclusions are separate checks.
Oct 27, 2026
ESET adds ChatGPT link and script checks, with Gemini and Copilot support still to come
ESET describes ChatGPT URL and script checks, agent monitoring and a separate free Skills Checker. Gemini and Copilot are forthcoming, while an iOS approval footnote limits broader availability wording.