Latest
  1. Visa benchmark finds AI shopping agents fail 42.8% of runs
  2. OpenAI releases GPT-6 Cyber for approved security customers
  3. Google releases Gemini Omni 1.2 Flash with 15-second video clips
  4. Sierra acquires Anon to give its AI agents browser access
  5. Shield AI to buy counter-drone radar maker Echodyne for $5.3 billion
  6. Dropbox agrees to buy Tigris Data for $350m to expand its AI infrastructure
  7. About 600,000 Nvidia H200 chips are stored in Hong Kong awaiting Chinese approval
  8. Anthropic’s compute costs rose to 58% of revenue in Q3, its IPO filing shows

Latest / Frontier models and safety

ReportFrontierDefenceInternationalConfirmed

Haiou jailbreak bundle for Codex injects ads into agent instruction files

See how this story connects

Source: Check Point ResearchAlso reported by The Hacker News

Check Point Research analysed the Haiou jailbreak bundle, a prompt package targeting OpenAI Codex, which it classifies as prompt adware. The bundle installs security-focused Skills and modifies Codex configuration files so that advertisements for an LLM gateway website are injected into later agent responses. Check Point found the bundle on a misconfigured webserver of a threat actor that ran Cobalt Strike, alongside Ladon and VulnClaw, and says this does not show the bundle was designed for cybercrime.

Why it matters

Anyone who installs the bundle has Codex configuration files altered so that ads for a third-party LLM gateway appear in later agent responses.

When
3 Nov 2026
ID
WTA-N-2026-0701
Who
Check Point Research, OpenAI

Summary written with AI by wheresthe.ai, from Check Point Research and the reporting credited above. Checked against the source on 4 Nov 2026.

Read the original at Check Point Research

Source copy: saved on 4 Nov 2026 to check this story and not republished, because the text belongs to its publisher. Also held by the Internet Archive.

Cite this story

WTA-N-2026-0701: “Haiou jailbreak bundle for Codex injects ads into agent instruction files.” wheresthe.ai, 3 Nov 2026. https://wheresthe.ai/d/intl-haiou-jailbreak-bundle-for-codex-injects-ads-into-agent-2026-11/ (source: Check Point Research).

Spotted an error? Email [email protected].