Cornell University researchers have revealed that ChatGPT agents can be manipulated to bypass CAPTCHA protections and internal safety rules, raising serious concerns about the security of large language models (LLMs) in enterprise environments. By using a technique known as prompt injection, the team demonstrated that even advanced anti-bot systems and AI guardrails can be circumvented when contextual manipulation is involved. AdvertisementImplications for enterprise securityThese findings underscore a vulnerability in AI systems: policies enforced through static intent detection or surface-level guardrails may be bypassed if the context is manipulated. AI guardrails must evolve beyond static rules, integrating layered defense strategies and adaptive risk assessments. The Cornell study demonstrates that AI systems, when presented with carefully manipulated context, can subvert their own safety mechanisms and even defeat mature security tools like CAPTCHAs.