ChatGPT for Sheets Fell for a Hidden Note and Started Emptying Your Spreadsheets

What happened

Security firm PromptArmor reported that an indirect prompt injection hidden in an imported spreadsheet could make ChatGPT for Google Sheets run an attacker-controlled script, which exfiltrated multiple workbooks and displayed phishing overlays. The attack reportedly worked even when automatic edits were disabled. OpenAI said it removed the model's ability to generate Apps Script code and is re-evaluating its sandboxing.