Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
OpenAI Brings ChatGPT Work Features to Standard Chat — Enterprise AI Governance and Data Exposure Risks Defenders Must Address
Introduction OpenAI has confirmed it is rolling ChatGPT Work capabilities directly into the standard Chat experience, while simultaneously d...
ChatGPT HTML Previews Sandboxing Gap: Detecting and Preventing Account Takeover
ChatGPT HTML Previews Sandboxing Gap: Detecting and Preventing Account Takeover Author: Senior Security Consultant, Security Arsenal Date: O...
OpenAI API Credits for Eligible ChatGPT Plans: Secure API Organizations, Keys, and Spend
Introduction OpenAI has introduced an API-credit benefit for eligible ChatGPT subscriptions. According to the October 29, 2026 announcement ...
OpenAI Sued by Eight States Over Child Safety and Data Use — What Enterprises Must Do About AI Data Governance Now
Introduction Eight US states, joined by a mother of two, have filed suit against OpenAI, alleging that the company behind ChatGPT put childr...
Shadow AI in the Enterprise: Detecting and Blocking Personal ChatGPT Use Before Sensitive Data Walks Out
Introduction Your organization paid for ChatGPT Enterprise. You got the admin console, the SSO enforcement, the no-training-on-your-data con...
OpenAI Invisible Watermarks for ChatGPT and Codex Text in the EU: What Security Teams Need to Know
Introduction OpenAI is preparing to deploy invisible watermarks in text generated by ChatGPT and Codex for users in the European Union. On i...
OpenAI Visual Ads in ChatGPT Image Generation: Enterprise Data Leakage and AI Governance Risks for Defenders
Introduction OpenAI has confirmed it is expanding advertising inside ChatGPT, with one of the first new formats displaying visual ads to use...
Malicious Custom GPTs Weaponize ChatGPT and Google Domains in ClickFix RAT Campaign — Detection and Hardening Guide
A Trusted Domain Is the New Phishing Page Security researchers have uncovered an active ClickFix-style campaign in which threat actors abuse...
OpenAI 'o' Always-On ChatGPT Assistant With Email Access: Defending Against AI Agent Prompt Injection and OAuth Abuse
Introduction OpenAI is quietly preparing a new always-on ChatGPT assistant internally codenamed "o" — and references to the unannounced feat...