Two independent red teams cracked the latest generation of ChatGPT within 24 hours. The tests show that simple multi-step stories can bypass the built-in security frameworks. Where Grok 4 quickly fell down, GPT 5 proved equally vulnerable. The findings touch directly on whether companies can safely deploy the raw model.<\/p>\n\n\n\n
NeuralTrust describes how a combination of a proprietary EchoChamber approach and narrative dialogue led the model step by step to forbidden output. Not the individual prompt but the entire conversation history became the lever. By seeding innocuous context and letting that context develop further and further, the system stayed consistent with the previously told story and passed safety filters without triggering alarms.<\/p>\n\n\n\n
SPLX came to a similar conclusion. According to these testers, the crude model is hardly applicable in a corporate environment. Concealment techniques still work. One example is stretching words by separating each character and packaging the whole thing as a mock task about encryption. After long conditioning, the model responds willingly and bypasses the original protection. In their benchmark, GPT 4o remains the more robust choice when additionally hardened.<\/p>\n\n\n\n
The thread is clear. Filters on just the current message fall short. The vulnerability lies in the connection between successive messages. Those who cleverly direct the sequence can hide the intent and still achieve the end goal. That makes the threat more realistic for any organization that uses chat-driven workflows for customer service decision-making or code assistance.<\/p>\n\n\n\n