13

Cybersecuritynews •Guru Baran • June 22, 2026

A newly published academic paper has revealed a critical vulnerability in AI-powered deep-research systems, including those underpinning commercial tools like OpenAI’s Deep Research and Google’s Gemini Deep Research, that allows a single short to manipulate the reports these agents generate for thousands of users. Researchers from Cornell Tech have introduced WARP (Web Agent […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Vulnerability in AI Research Tools Allows Manipulation via Reddit Comments A critical vulnerability has been identified in AI deep research systems, including OpenAI's ChatGPT Deep Research and Google's Gemini Deep Research. Researchers from Cornell Tech revealed that a single Reddit comment can manipulate the recommendations of these systems, affecting 54 to 71 percent of user-generated content. The attack, termed WARP (Web Agent Retrieval Poisoning), requires no access to the systems or specific user queries. Instead, attackers can exploit the systems by posting misleading content on public forums. This vulnerability allows for the potential spread of scams and misinformation to thousands of users. The research paper detailing these findings was published in May 2026, with further analysis released on June 22, 2026. The attack method is particularly concerning due to the reliance of these AI systems on community-generated content for their outputs. 2 sources 65

13

The full story

Extracted Entities

Companies (2)

Platforms (2)