Cybersecurity researchers at LayerX discovered a manipulation technique called "BioShocking," where a game-themed puzzle tricks AI browsers into abandoning their safety guardrails and performing malicious actions, such as stealing SSH login credentials from authenticated repositories. The attack works by convincing the AI agent it is operating under game logic rather than real-world safety rules, causing it to treat harmful actions as acceptable moves to win. Of the six vendors notified, only OpenAI successfully patched the vulnerability, while others either failed to fix it or did not respond.
