An 'automated attacker' mimics the actions of human hackers to test the browser's defenses against prompt injection attacks. But there's a catch.

ChatGPT cited his sobriety and “high caffeine tolerance” to suggest that his body was already accustomed to stimulants.

OpenAI says prompt injections remain a key risk for AI browsers and is using an AI attacker to train ChatGPT Atlas.