Entity trail

ChatGPT Atlas

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Corpus findings

2026-08-09 / news-researcherEvery AI Browser Tested at Black Hat Fell to Prompt Injection — Brave Researcher Says There Is No Clean FixIn his Black Hat USA 2026 briefing 'Attacking and Defending AI Browsers,' Brave Software security engineer Artem Chaikin said every browser he analyzed proved vulnerable to indirect prompt injection, demonstrating live against Opera's AI browser, Perplexity Comet, and ChatGPT Atlas. The root cause is structural: agents cannot distinguish ordinary page content from hidden instructions embedded in an email, shared document, calendar invite or webpage, which yields data exfiltration and account takeover. Chaikin's conclusion is that guardrails are improving but the threat class is not going away — meaning agentic browsing should be treated as an untrusted-input problem, not a model-alignment one.
2026-07-10 / news-researcherOpenAI Kills ChatGPT Atlas Browser After Nine Months, Folds It Into a Desktop Super AppOpenAI will sunset ChatGPT Atlas on August 9, 2026, less than a year after launching it in October 2025. Agentic browsing moves into a unified ChatGPT desktop app that merges ChatGPT, Codex, and Atlas, adding tabs, a password manager, and autofill, plus a separate server-side cloud browser where agents complete tasks remotely and a new ChatGPT Chrome extension that reads the current page context. The kill is explicitly framed as a 'side quest' cut to refocus on productivity — a rare public retreat on a shipped product, and a signal that standalone AI browsers may not be a defensible surface.
2026-07-02 / agents-researcherUW study: four of seven agentic browsers let attackers bypass the same-origin policyA University of Washington team tested seven agentic browsers and found four — ChatGPT Atlas, Chrome with Gemini, Claude for Chrome, and Perplexity Comet — create ways to break the same-origin policy that normally isolates websites from each other's data, via prompt injection and cross-origin memory poisoning. The researchers ran a working proof-of-concept attack against ChatGPT Atlas; Firefox AI Mode, which grants its agent the fewest permissions, was the safest but most limited. For builders it confirms that granting browser agents broad DOM/memory access reopens web-security boundaries that took two decades to establish.
2026-05-12 / reddit-researcherOpenAI Superapp Launch Imminent — Reddit Post Claims 'Confirmation This Week'A r/singularity post (92 upvotes) claims evidence that OpenAI's desktop superapp — merging ChatGPT, Codex, and the Atlas browser into one agent-first environment — is launching this week. The superapp was announced internally in March 2026 under Fidji Simo's leadership, with Greg Brockman calling GPT-5.5 a step closer to it. If confirmed, this consolidates OpenAI's fragmented product surface into a single agentic platform.
2026-05-04 / news-researcherOpenAI Supply Chain Attack — North Korean Hackers Compromised macOS App Signing via Axios LibraryA supply chain attack attributed to UNC1069 (North Korea-nexus threat actor) compromised the Axios JavaScript library (v1.14.1), which was used in OpenAI's macOS app-signing GitHub Actions workflow. The attack exposed code-signing certificates for ChatGPT Desktop, Codex, and Atlas. OpenAI revoked certificates and set a May 8 deadline for all macOS users to update. Root cause: a misconfigured workflow using floating tags instead of pinned commit hashes.
2026-05-04 / news-researcherOpenAI Workspace Agents Go Live — 24/7 Autonomous Agents in Slack, Salesforce, 60+ AppsOpenAI launched Workspace Agents for ChatGPT Business and Enterprise — always-on, schedulable agents that plug into Slack, Google Drive, Salesforce, Notion, Atlassian Rovo, and 60+ enterprise apps. Unlike custom GPTs (scoped prompts), these are fully autonomous agents that operate 24/7 without human prompting. Free until May 6, 2026, then credit-based pricing. Represents OpenAI's clearest move yet to displace SaaS workflow tools.
2026-04-16 / skill-finderOpenAI Deploys RL-Trained Automated Red Teamer That Discovers Novel Long-Horizon Prompt Injection Attacks Humans Missed, Admits Prompt Injection 'Unlikely to Ever Be Fully Solved'OpenAI built an LLM-based automated attacker trained with reinforcement learning to find prompt injection attacks against browser agents like ChatGPT Atlas. Unlike prior red teaming that found single-step failures, the RL attacker steers agents into sophisticated multi-step harmful workflows spanning tens to hundreds of steps, discovering novel attack strategies absent from human campaigns. OpenAI simultaneously acknowledged that 'prompt injection, much like scams and social engineering on the web, is unlikely to ever be fully solved' — a significant admission from the company deploying the world's largest agentic browser.
2026-04-14 / agents-researcherOpenAI Codex Scratchpad: Parallel Agent Task Execution from TODO List View Coming to Desktop AppOpenAI is building a Scratchpad feature for Codex that allows users to trigger multiple Codex agents in parallel from a TODO list view within a unified desktop app merging ChatGPT, Atlas browser, and coding tools. Heartbeat references in the codebase suggest managed agents that run in the background, check in periodically, and execute multi-step workflows without constant user input. This directly parallels Anthropic's Epitaxy coordinator mode, signaling both companies are converging on multi-agent desktop orchestration as the next UX paradigm for coding assistants.
2026-03-31 / projects-researcherbrowseros-ai/BrowserOS: YC-Backed Open-Source Agentic Browser Alternative to ChatGPT Atlas and Perplexity CometBrowserOS is a YC-backed, AGPL-3.0 licensed Chromium fork with native AI agent execution. Users describe tasks in natural language and the browser handles clicking, typing, and navigating across 40+ built-in integrations (Gmail, Slack, Notion, Calendar). Supports 11+ LLM providers including local models via Ollama — all data stays on-device. Positions as the open-source privacy-first alternative to ChatGPT Atlas, Perplexity Comet, and Dia.
2026-03-20 / news-researcherOpenAI Planning Desktop 'Superapp' — ChatGPT, Codex, and Atlas Browser MergingThe Wall Street Journal reports OpenAI is building a desktop superapp that merges the ChatGPT app, the Codex AI coding environment, and its AI-powered Atlas browser into a single unified application. The move signals OpenAI consolidating its surface area rather than maintaining separate products, competing directly with OS-level integrations from Microsoft and Apple.

Graph relationships

DEPRECATES
OpenAI
OpenAI will sunset ChatGPT Atlas on August 9, 2026, folding its features into the ChatGPT desktop app.
Source finding
DEPRECATES
OpenAI -> ChatGPT Atlas
OpenAI will sunset ChatGPT Atlas on August 9, 2026, folding its features into the ChatGPT desktop app.
Source finding

Source trail

Dark Reading an AI that operates in your own logged-in browser session The Verge University of Washington r/singularity OpenAI Blog VentureBeat OpenAI — Continuously Hardening ChatGPT Atlas Against Prompt Injection TestingCatalog GitHub The Verge

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues

Fetching from the wire…