Fetching from the wire…
01
02
03
04
05
06
07
08
Security2026-06-07 · source-backed
First teased in February, Lockdown Mode is now live across Free, Go, Plus, Pro, and self-serve Business. It limits outbound network requests to break the exfiltration leg of Simon Willison's "lethal trifecta," using deterministic controls rather than asking an AI to evaluate whether something's safe. Source: Simon Willison / OpenAI Help The quiet implication is the real story: an opt-in mode means default ChatGPT does not robustly stop a determined exfiltration attack. CISO Dane Stuckey framed it as a tool for elevated-risk users with functionality tradeoffs. If you've connected ChatGPT to private data and you haven't turned this on, you're running the unsafe default.
Each link below shares sources, entities, or timing with this story.
OpenAI's new Lockdown Mode restricts an agent's outbound network requests to block data exfiltration from prompt injection, targeting the lethal trifecta of private data plus untrusted content plus an exfiltration channel. Simon Willison's point is the one to copy: the restric...
The official DALL·E GPT is being removed from ChatGPT on August 30, with users told to download images they want to keep and use ChatGPT Images instead. Separately, ChatGPT now supports connecting multiple accounts for the Gmail, Google Calendar and Google Contacts plugins, so...
Shipped August 13 to Pro, Business and Enterprise: ChatGPT and Codex can draw on activity memories from apps and websites on macOS, with per-app opt-in and review or delete controls. OpenAI This is Cursor's Google Workspace connector move, but reaching down to OS-level activit...
Rolling out June 17 to Go, Plus, Pro, Business, and Enterprise on web and mobile: a Scheduled page to create, pause, edit, and delete recurring jobs. Monitoring tasks search the web and check connected apps, notifying only on change, capped at once per hour. It's a built-in cr...
The email went out August 15 alongside a preview of the updated EU privacy policy covering how ads get selected, measured, and controlled (OpenAI). The legally significant choice is the GDPR basis: explicit consent for personalized ads is a stricter posture than most ad platfo...
Satya Nadella said companies routing everything through a single proprietary lab may not survive. His argument: you hand that lab your most sensitive business context, and the lab can turn it against you as a competitor. His prescription is an orchestration layer — keep the ha...
MindPattern daily
One email a day at 7 AM. Sources and a take on every story. Unsubscribe anytime.