[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fb8zJX3r9n52-jQumWRZmCJo39zJFoVvAQq8uWYDWEpg":3},{"article":4,"iocs":41,"watch_terms":42,"solutions":43,"lesson":126},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":23,"category":24,"article_tags":28},"7e451daf-0914-482a-8990-d950bda6ee94","OpenAI Rolling Out ChatGPT Account Security Controls","openai-rolling-out-chatgpt-account-security-controls-1255a3","The Active Sessions and Lockdown Mode features are being made more broadly available by the AI giant. The post OpenAI Rolling Out ChatGPT Account Security Controls appeared first on SecurityWeek.","OpenAI is making two account security features, Lockdown Mode and Active Sessions, more widely available to ChatGPT users. Lockdown Mode aims to prevent data exfiltration from prompt injection attacks by limiting outbound network requests, while Active Sessions allows users to review and manage their logged-in devices. These features provide enhanced protection for sensitive data and account integrity.","OpenAI expands ChatGPT account security features like Lockdown Mode and Active Sessions.","https:\u002F\u002Fwww.securityweek.com\u002Fopenai-rolling-out-chatgpt-account-security-controls\u002F","https:\u002F\u002Fwww.securityweek.com\u002Fwp-content\u002Fuploads\u002F2025\u002F11\u002FOpenAI.jpeg","2026-06-08T08:32:49+00:00","2026-06-08T10:00:19.460357+00:00",7,[17,20],{"name":18,"type":19},"ChatGPT","product",{"name":21,"type":22},"OpenAI","vendor","839da5c1-3c34-47e2-9499-f7201640e3ac",{"id":23,"icon":25,"name":26,"slug":27},null,"AI Security","ai-security",[29,34,39],{"category":30},{"id":31,"icon":25,"name":32,"slug":33},"02371804-cf6d-4449-98de-f1a2d4d9b266","Tools","tools",{"category":35},{"id":36,"icon":25,"name":37,"slug":38},"614132b8-5837-4952-b8b5-c6c9a32a1d85","Privacy","privacy",{"category":40},{"id":23,"icon":25,"name":26,"slug":27},[],[21,18],{"controls":44,"vendors":125},[45,74,100],{"slug":46,"name":47,"problem":48,"products":49},"phishing-resistant-mfa","Phishing-resistant MFA","A stolen password, or a user who taps Approve on a push prompt, is no longer enough to log in.",[50,58,66],{"vendor_slug":51,"vendor_name":52,"vendor_logo":53,"product_slug":54,"product_name":55,"url":56,"description":57},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","entra-id","Microsoft Entra ID","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fidentity-access\u002Fmicrosoft-entra-id","Cloud identity and access management with single sign-on, conditional access, passkeys and identity governance.",{"vendor_slug":59,"vendor_name":60,"vendor_logo":61,"product_slug":62,"product_name":63,"url":64,"description":65},"okta","Okta","\u002Fvendor-logos\u002Fokta.png","workforce-identity","Okta Workforce Identity","https:\u002F\u002Fwww.okta.com\u002Fproducts\u002Fworkforce-identity\u002F","Single sign-on, adaptive MFA including phishing-resistant methods, and lifecycle management for employees.",{"vendor_slug":67,"vendor_name":68,"vendor_logo":69,"product_slug":70,"product_name":71,"url":72,"description":73},"cisco","Cisco","\u002Fvendor-logos\u002Fcisco.png","duo","Cisco Duo","https:\u002F\u002Fduo.com\u002F","MFA and device trust, with support for passkeys and security keys.",{"slug":75,"name":76,"problem":77,"products":78},"data-loss-prevention","Data loss prevention (DLP)","Sensitive data cannot quietly leave by email, upload, USB stick or AI tool.",[79,87,92],{"vendor_slug":80,"vendor_name":81,"vendor_logo":82,"product_slug":83,"product_name":84,"url":85,"description":86},"proofpoint","Proofpoint","\u002Fvendor-logos\u002Fproofpoint.png","enterprise-dlp","Proofpoint Enterprise DLP","https:\u002F\u002Fwww.proofpoint.com\u002Fus\u002Fproducts\u002Fdata-loss-prevention","Data loss prevention across email, cloud and endpoints.",{"vendor_slug":51,"vendor_name":52,"vendor_logo":53,"product_slug":88,"product_name":89,"url":90,"description":91},"purview-dlp","Microsoft Purview Data Loss Prevention","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fdata-security-governance\u002Fmicrosoft-purview-data-security","Data classification and loss prevention across Microsoft 365, endpoints and connected cloud apps.",{"vendor_slug":93,"vendor_name":94,"vendor_logo":95,"product_slug":96,"product_name":97,"url":98,"description":99},"forcepoint","Forcepoint","\u002Fvendor-logos\u002Fforcepoint.png","forcepoint-dlp","Forcepoint DLP","https:\u002F\u002Fwww.forcepoint.com\u002Fproduct\u002Fdlp-data-loss-prevention","Data loss prevention for endpoints, network, email and cloud applications.",{"slug":27,"name":101,"problem":102,"products":103},"AI application security","Prompt injection, data leaks through AI tools and unapproved AI use get caught.",[104,112,117],{"vendor_slug":105,"vendor_name":106,"vendor_logo":107,"product_slug":108,"product_name":109,"url":110,"description":111},"boomi","Boomi","\u002Fvendor-logos\u002Fboomi.png","boomi-agentstudio","Boomi Agentstudio","https:\u002F\u002Fboomi.com\u002Fplatform\u002Fagentstudio\u002F","Agent builder whose Agent Control Tower registers and monitors Boomi agents and agents on Amazon Bedrock, Microsoft Copilot and other platforms, keeps audit logs and can switch agents off where the provider allows it.",{"vendor_slug":105,"vendor_name":106,"vendor_logo":107,"product_slug":113,"product_name":114,"url":115,"description":116},"boomi-ai-gateway","Boomi AI Gateway","https:\u002F\u002Fboomi.com\u002Fplatform\u002Fai-gateway\u002F","Gateway for AI model and MCP tool traffic, built on Lunar.dev technology. It limits which tools each agent can call. Its enterprise version adds an approval step for new MCP servers and logs each call with the user or agent behind it.",{"vendor_slug":118,"vendor_name":119,"vendor_logo":120,"product_slug":121,"product_name":122,"url":123,"description":124},"hiddenlayer","HiddenLayer","\u002Fvendor-logos\u002Fhiddenlayer.png","hiddenlayer-ai-security","HiddenLayer AI Security Platform","https:\u002F\u002Fhiddenlayer.com\u002F","Model scanning, AI red teaming and runtime protection for AI applications.",[],{"slug":127,"title":128,"body":129,"framework_refs":130,"framework_notes":137},"openai-enhances-chatgpt-security-with-account-controls-and-data-protection-features","OpenAI Enhances ChatGPT Security with Account Controls and Data Protection Features","OpenAI's rollout of Lockdown Mode and Active Sessions demonstrates proactive security measures to address emerging threats in AI platforms. Lockdown Mode specifically targets prompt injection attacks that could lead to data exfiltration, while Active Sessions provides users visibility into their account access patterns. These controls highlight the importance of implementing defense-in-depth strategies for AI systems that handle sensitive data. Organizations using AI platforms should prioritize enabling available security features and maintaining awareness of their account activity.",[131,132,133,134,135,136],"CIS Control 5","CIS Control 6","NIST AC-2","NIST AC-12","NIST SC-7","ISO 27001 A.9.1.2",{}]