From ChatGPT to ThreatGPT: Impact of Generative AI in Cybersecurity and Privacy
On the map: LLM safety and security → Prompt injection and agent security
Abstract (arXiv)
Undoubtedly, the evolution of Generative AI (GenAI) models has been the highlight of digital transformation in the year 2022. As the different GenAI models like ChatGPT and Google Bard continue to foster their complexity and capability, it's critical to understand its consequences from a cybersecurity perspective. Several instances recently have demonstrated the use of GenAI tools in both the defensive and offensive side of cybersecurity, and focusing on the social, ethical and privacy implications this technology possesses. This research paper highlights the limitations, challenges, potential risks, and opportunities of GenAI in the domain of cybersecurity and privacy. The work presents the vulnerabilities of ChatGPT, which can be exploited by malicious users to exfiltrate malicious information bypassing the ethical constraints on the model. This paper demonstrates successful example attacks like Jailbreaks, reverse psychology, and prompt injection attacks on the ChatGPT. The paper also investigates how cyber offenders can use the GenAI tools in developing cyber attacks, and explore the scenarios where ChatGPT can be used by adversaries to create social engineering attacks, phishing attacks, automated hacking, attack payload generation, malware creation, and polymorphic malware. This paper then examines defense techniques and uses GenAI tools to improve security measures, including cyber defense automation, reporting, threat intelligence, secure code generation and detection, attack identification, developing ethical guidelines, incidence response plans, and malware detection. We will also discuss the social, legal, and ethical implications of ChatGPT. In conclusion, the paper highlights open challenges and future directions to make this GenAI secure, safe, trustworthy, and ethical as the community understands its cybersecurity impacts.
Key facts. Cited by 137 papers in the map (data through 7 Oct 2026). Placed in Prompt injection and agent security, one of 12 directions in LLM safety and security. Builds on 5 of its 56 references that are in the map. First posted on arXiv 3 Jul 2023.
Builds on
5 of 56 references.
References · 5
- 2023GPT-4 Technical Reportcited by 18,132
- 2023LLaMA: Open and Efficient Foundation Language Modelscited by 13,958
- 2022Generative Adversarial Networkscited by 5,603
- 2020Towards a Human-like Open-Domain Chatbotcited by 467
- 2021A Survey on Adversarial Attacks for Malware Analysiscited by 15
Built on by
Citing papers per year: 2023: 17; 2024: 63; 2025: 47; 2026: 10.
137 papers.
Sort:
By area:
- 2023A Survey on Large Language Model (LLM) Security and Privacy: The Good, the Bad, and the Uglycited by 380
- 2023LLM Self Defense: By Self Examination, LLMs Know They Are Being Trickedcited by 226
- 2024Jailbreak Attacks and Defenses Against Large Language Models: A Surveycited by 215
- 2024Security and Privacy Challenges of Large Language Models: A Surveycited by 179
- 2024Benchmark Data Contamination of Large Language Models: A Surveycited by 138
- 2024Attacks, Defenses and Evaluations for LLM Conversation Safety: A Surveycited by 124
- 2024AI Agents Under Threat: A Survey of Key Security Challenges and Future Pathwayscited by 122
- 2024AutoAttacker: A Large Language Model Guided System to Implement Automatic Cyber-attackscited by 94
- 2023Use of LLMs for Illicit Purposes: Threats, Prevention Measures, and Vulnerabilitiescited by 76
- 2024A New Era in LLM Security: Exploring Security Concerns in Real-World LLM-based Systemscited by 74
- 2024When LLMs Meet Cybersecurity: A Systematic Literature Reviewcited by 70
- 2024JailbreakZoo: Survey, Landscapes, and Horizons in Jailbreaking Large Language and Vision-Language Modelscited by 67
38 more
- 2024Risk Taxonomy, Mitigation, and Assessment Benchmarks of Large Language Model Systemscited by 63
- 2023Latent Jailbreak: A Benchmark for Evaluating Text Safety and Output Robustness of Large Language Modelscited by 56
- 2023GenAI Against Humanity: Nefarious Applications of Generative Artificial Intelligence and Large Language Modelscited by 40
- 2024RedAgent: Red Teaming Large Language Models with Context-aware Autonomous Language Agentcited by 39
- 2023Advancements in Generative AI: A Comprehensive Review of GANs, GPT, Autoencoders, Diffusion Model, and Transformerscited by 35
- 2024AI Hallucinations: A Misnomer Worth Clarifyingcited by 34
- 2024An Early Categorization of Prompt Injection Attacks on Large Language Modelscited by 28
- 2023Make Them Spill the Beans! Coercive Knowledge Extraction from (Production) LLMscited by 26
- 2023LLMs as Hackers: Autonomous Linux Privilege Escalation Attackscited by 25
- 2024Malla: Demystifying Real-world Large Language Model Integrated Malicious Servicescited by 24
- 2023Using Large Language Models for Cybersecurity Capture-The-Flag Challenges and Certification Questionscited by 23
- 2024Explainable Generative AI (GenXAI): A Survey, Conceptualization, and Research Agendacited by 22
- 2024From LLMs to MLLMs: Exploring the Landscape of Multimodal Jailbreakingcited by 22
- 2024Mapping the Ethics of Generative AI: A Comprehensive Scoping Reviewcited by 19
- 2023RatGPT: Turning online LLMs into Proxies for Malware Attackscited by 17
- 2024Exploring the Frontiers of LLMs in Psychological Applications: A Comprehensive Reviewcited by 17
- 2023Negotiating with LLMS: Prompt Hacks, Skill Gaps, and Reasoning Deficitscited by 16
- 2025Large Language Model (LLM) for Software Security: Code Analysis, Malware Analysis, Reverse Engineeringcited by 15
- 2024Evaluation of LLM Chatbots for OSINT-based Cyber Threat Awarenesscited by 14
- 2024Toxicity Detection for Freecited by 14
- 2024Actionable Cyber Threat Intelligence using Knowledge Graphs and Large Language Modelscited by 14
- 2023From Chatbots to PhishBots? -- Preventing Phishing scams created using ChatGPT, Google Bard and Claudecited by 12
- 2024Quantized Delta Weight Is Safety Keepercited by 12
- 2024Risks and Opportunities of Open-Source Generative AIcited by 11
- 2024Efficient Detection of Toxic Prompts in Large Language Modelscited by 11
- 2025From LLMs to MLLMs to Agents: A Survey of Emerging Paradigms in Jailbreak Attacks and Defenses within LLM Ecosystemcited by 11
- 2023AutoHall: Automated Factuality Hallucination Dataset Generation for Large Language Modelscited by 10
- 2023Cyber Sentinel: Exploring Conversational Agents in Streamlining Security Tasks with GPT-4cited by 9
- 2024Natural Language Processing RELIES on Linguisticscited by 9
- 2024Applications of Generative AI (GAI) for Mobile and Wireless Networking: A Surveycited by 9
- 2025Large Language Models for Security Operations Centers: A Comprehensive Surveycited by 9
- 2024Can LLMs Deeply Detect Complex Malicious Queries? A Framework for Jailbreaking via Obfuscating Intentcited by 8
- 2024Risks, Causes, and Mitigations of Widespread Deployments of Large Language Models (LLMs): A Surveycited by 8
- 2025On the Impact of Noise in Differentially Private Text Rewritingcited by 8
- 2024AbuseGPT: Abuse of Generative AI ChatBots to Create Smishing Campaignscited by 7
- 2024From COBIT to ISO 42001: Evaluating Cybersecurity Frameworks for Opportunities, Risks, and Regulatory Compliance in Commercializing Large Language Modelscited by 7
- 2024A Survey on Human-AI Collaboration with Large Foundation Modelscited by 7
- 2025Activation Approximations Can Incur Safety Vulnerabilities Even in Aligned LLMs: Comprehensive Analysis and Defensecited by 7
50 most cited of 137 All 137 (JSON)
- 2026Evaluating Context Segmentation in Locally Deployable SLMs for Cybersecurity CTF Tasks11 Sep 2026
- 2026VEXAIoT: Autonomous IoT Vulnerability EXploitation using AI Agents10 Jul 2026
- 2026MalTree: Tracing Malware Evolution from Embeddings at Scale4 Jun 2026
- 2026TriEval: A Resource-Efficient Pipeline for LLM Bias, Toxicity, and Truthfulness Assessment2 Jun 2026
- 2026Stand-Alone Complex or Vibercrime? Exploring the adoption and innovation of GenAI tools, coding assistants, and agents within cybercrime ecosystems31 Mar 2026
- 2026Cyber Threat Intelligence for Artificial Intelligence Systems5 Mar 2026
- 2026A Privacy by Design Framework for Large Language Model-Based Applications for Children19 Feb 2026
- 2026Investigating Writing Professionals' Relationships with Generative AI: How Combined Perceptions of Rivalry and Collaboration Shape Work Practices and Outcomes9 Feb 2026
- 2026PriMod4AI: Lifecycle-Aware Privacy Threat Modeling for AI Systems using LLM4 Feb 2026
- 2026Comparative Insights on Adversarial Machine Learning from Industry and Academia: A User-Study Approach4 Feb 2026
- 2025Detecting Prompt Injection Attacks Against Application Using Classifiers14 Dec 2025
- 2025SoK: a Comprehensive Causality Analysis Framework for Large Language Model Security4 Dec 2025
38 more
- 2025A Customer Journey in the Land of Oz: Leveraging the Wizard of Oz Technique to Model Emotions in Customer Service Interactions26 Nov 2025
- 2025Semantic Superiority vs. Forensic Efficiency: A Comparative Analysis of Deep Learning and Psycholinguistics for Business Email Compromise Detection26 Nov 2025
- 2025A Longitudinal Measurement of Privacy Policy Evolution for Large Language Models24 Nov 2025
- 2025AlignTree: Efficient Defense Against LLM Jailbreak Attacks15 Nov 2025
- 2025Securing Generative AI in Healthcare: A Zero-Trust Architecture Powered by Confidential Computing on Google Cloud14 Nov 2025
- 2025SoK: Systematizing LLM Prompt Security: Taxonomies, Datasets, and Unified Evaluation of Attacks and Defenses17 Oct 2025
- 2025A cybersecurity AI agent selection and decision support framework2 Oct 2025
- 2025Privy: Envisioning and Mitigating Privacy Risks for Consumer-facing AI Product Concepts27 Sep 2025
- 2025LLMZ+: Contextual Prompt Whitelist Principles for Agentic LLMs23 Sep 2025
- 2025Large Language Models for Security Operations Centers: A Comprehensive Survey13 Sep 2025
- 2025LLM in the Middle: A Systematic Review of Threats and Mitigations to Real-World LLM-based Systems12 Sep 2025
- 2025When Explainability Meets Privacy: An Investigation at the Intersection of Post-hoc Explainability and Differential Privacy in the Context of Natural Language Processing14 Aug 2025
- 2025Securing Educational LLMs: A Generalised Taxonomy of Attacks on LLMs and DREAD Risk Assessment12 Aug 2025
- 2025What Makes Code Generation Ethically Sourced?26 Jul 2025
- 2025GRAF: Multi-turn Jailbreaking via Global Refinement and Active Fabrication22 Jun 2025
- 2025From LLMs to MLLMs to Agents: A Survey of Emerging Paradigms in Jailbreak Attacks and Defenses within LLM Ecosystem18 Jun 2025
- 2025LLM Embedding-based Attribution (LEA): Quantifying Source Contributions to Generative Model's Response for Vulnerability Analysis12 Jun 2025
- 2025Improving LLM Outputs Against Jailbreak Attacks with Expert Model Integration18 May 2025
- 2025AC-LoRA: (Almost) Training-Free Access Control-Aware Multi-Modal LLMs15 May 2025
- 2025Analysing Safety Risks in LLMs Fine-Tuned with Pseudo-Malicious Cyber Security Data15 May 2025
- 2025Securing RAG: A Risk Assessment and Mitigation Framework13 May 2025
- 2025A Large-Scale Empirical Analysis of Custom GPTs' Vulnerabilities in the OpenAI Ecosystem13 May 2025
- 2025Understanding and Mitigating Risks of Generative AI in Financial Services25 Apr 2025
- 2025On Developers' Self-Declaration of AI-Generated Code: An Analysis of Practices23 Apr 2025
- 2025Reflexive Prompt Engineering: A Framework for Responsible Prompt Engineering and Interaction Design22 Apr 2025
- 2025Large Language Model (LLM) for Software Security: Code Analysis, Malware Analysis, Reverse Engineering7 Apr 2025
- 2025Code Red! On the Harmfulness of Applying Off-the-shelf Large Language Models to Programming Tasks2 Apr 2025
- 2025Spend Your Budget Wisely: Towards an Intelligent Distribution of the Privacy Budget in Differentially Private Text Rewriting28 Mar 2025
- 2025Prompt, Divide, and Conquer: Bypassing Large Language Model Safety Filters via Segmented and Distributed Prompt Processing27 Mar 2025
- 2025Big Help or Big Brother? Auditing Tracking, Profiling, and Personalization in Generative AI Assistants20 Mar 2025
- 2025Ethical AI for Young Digital Citizens: A Call to Action on Privacy Governance15 Mar 2025
- 2025CyberLLMInstruct: A Pseudo-malicious Dataset Revealing Safety-performance Trade-offs in Cyber Security LLM Fine-tuning12 Mar 2025
- 2025MAD-MAX: Modular And Diverse Malicious Attack MiXtures for Automated LLM Red Teaming8 Mar 2025
- 2025Experiences with Content Development and Assessment Design in the Era of GenAI28 Feb 2025
- 2025Beyond the Tip of Efficiency: Uncovering the Submerged Threats of Jailbreak Attacks in Small Language Models27 Feb 2025
- 2025How Jailbreak Defenses Work and Ensemble? A Mechanistic Investigation20 Feb 2025
- 2025Application Modernization with LLMs: Addressing Core Challenges in Reliability, Security, and Quality13 Feb 2025
- 2025Generative AI for Internet of Things Security: Challenges and Opportunities13 Feb 2025
50 newest of 137 All 137 (JSON)
- 2023LLM Self Defense: By Self Examination, LLMs Know They Are Being Trickedcited by 226
- 2024Jailbreak Attacks and Defenses Against Large Language Models: A Surveycited by 215
- 2024Security and Privacy Challenges of Large Language Models: A Surveycited by 179
- 2023Latent Jailbreak: A Benchmark for Evaluating Text Safety and Output Robustness of Large Language Modelscited by 56
- 2024An Early Categorization of Prompt Injection Attacks on Large Language Modelscited by 28
- 2024Quantized Delta Weight Is Safety Keepercited by 12
- 2024Can LLMs Deeply Detect Complex Malicious Queries? A Framework for Jailbreaking via Obfuscating Intentcited by 8
- 2025Prompt, Divide, and Conquer: Bypassing Large Language Model Safety Filters via Segmented and Distributed Prompt Processingcited by 5
- 2025Understanding and Mitigating Risks of Generative AI in Financial Servicescited by 4
- 2025SoK: Systematizing LLM Prompt Security: Taxonomies, Datasets, and Unified Evaluation of Attacks and Defensescited by 4
- 2024Preventing Jailbreak Prompts as Malicious Tools for Cybercriminals: A Cyber Defense Perspectivecited by 3
- 2025Beyond the Tip of Efficiency: Uncovering the Submerged Threats of Jailbreak Attacks in Small Language Modelscited by 2
12 most cited of 22 All 22 (JSON)
- 2026Evaluating Context Segmentation in Locally Deployable SLMs for Cybersecurity CTF Tasks11 Sep 2026
- 2025Detecting Prompt Injection Attacks Against Application Using Classifiers14 Dec 2025
- 2025SoK: a Comprehensive Causality Analysis Framework for Large Language Model Security4 Dec 2025
- 2025AlignTree: Efficient Defense Against LLM Jailbreak Attacks15 Nov 2025
- 2025SoK: Systematizing LLM Prompt Security: Taxonomies, Datasets, and Unified Evaluation of Attacks and Defenses17 Oct 2025
- 2025Securing Educational LLMs: A Generalised Taxonomy of Attacks on LLMs and DREAD Risk Assessment12 Aug 2025
- 2025GRAF: Multi-turn Jailbreaking via Global Refinement and Active Fabrication22 Jun 2025
- 2025Improving LLM Outputs Against Jailbreak Attacks with Expert Model Integration18 May 2025
- 2025Analysing Safety Risks in LLMs Fine-Tuned with Pseudo-Malicious Cyber Security Data15 May 2025
- 2025Understanding and Mitigating Risks of Generative AI in Financial Services25 Apr 2025
- 2025Prompt, Divide, and Conquer: Bypassing Large Language Model Safety Filters via Segmented and Distributed Prompt Processing27 Mar 2025
- 2025MAD-MAX: Modular And Diverse Malicious Attack MiXtures for Automated LLM Red Teaming8 Mar 2025
12 newest of 22 All 22 (JSON)
- 2024RedAgent: Red Teaming Large Language Models with Context-aware Autonomous Language Agentcited by 39
- 2025From LLMs to MLLMs to Agents: A Survey of Emerging Paradigms in Jailbreak Attacks and Defenses within LLM Ecosystemcited by 11
- 2023Cyber Sentinel: Exploring Conversational Agents in Streamlining Security Tasks with GPT-4cited by 9
- 2025LLMZ+: Contextual Prompt Whitelist Principles for Agentic LLMscited by 5
- 2024Artificial Intelligence as the New Hacker: Developing Agents for Offensive Securitycited by 4
- 2025A Longitudinal Measurement of Privacy Policy Evolution for Large Language Modelscited by 2
- 2026Stand-Alone Complex or Vibercrime? Exploring the adoption and innovation of GenAI tools, coding assistants, and agents within cybercrime ecosystemscited by 0
- 2026VEXAIoT: Autonomous IoT Vulnerability EXploitation using AI Agentscited by 0
- 2026VEXAIoT: Autonomous IoT Vulnerability EXploitation using AI Agents10 Jul 2026
- 2026Stand-Alone Complex or Vibercrime? Exploring the adoption and innovation of GenAI tools, coding assistants, and agents within cybercrime ecosystems31 Mar 2026
- 2025A Longitudinal Measurement of Privacy Policy Evolution for Large Language Models24 Nov 2025
- 2025LLMZ+: Contextual Prompt Whitelist Principles for Agentic LLMs23 Sep 2025
- 2025From LLMs to MLLMs to Agents: A Survey of Emerging Paradigms in Jailbreak Attacks and Defenses within LLM Ecosystem18 Jun 2025
- 2024RedAgent: Red Teaming Large Language Models with Context-aware Autonomous Language Agent23 Jul 2024
- 2024Artificial Intelligence as the New Hacker: Developing Agents for Offensive Security9 May 2024
- 2023Cyber Sentinel: Exploring Conversational Agents in Streamlining Security Tasks with GPT-428 Sep 2023
- 2024JailbreakZoo: Survey, Landscapes, and Horizons in Jailbreaking Large Language and Vision-Language Modelscited by 67
- 2024From LLMs to MLLMs: Exploring the Landscape of Multimodal Jailbreakingcited by 22
- 2024The Minimum Information about CLinical Artificial Intelligence Checklist for Generative Modeling Research (MI-CLAIM-GEN)cited by 3
- 2024JailbreakZoo: Survey, Landscapes, and Horizons in Jailbreaking Large Language and Vision-Language Models26 Jun 2024
- 2024From LLMs to MLLMs: Exploring the Landscape of Multimodal Jailbreaking21 Jun 2024
- 2024The Minimum Information about CLinical Artificial Intelligence Checklist for Generative Modeling Research (MI-CLAIM-GEN)5 Mar 2024
- 2023A Survey on Large Language Model (LLM) Security and Privacy: The Good, the Bad, and the Uglycited by 380
- 2024Benchmark Data Contamination of Large Language Models: A Surveycited by 138
- 2024Attacks, Defenses and Evaluations for LLM Conversation Safety: A Surveycited by 124
- 2024AI Agents Under Threat: A Survey of Key Security Challenges and Future Pathwayscited by 122
- 2024AutoAttacker: A Large Language Model Guided System to Implement Automatic Cyber-attackscited by 94
- 2023Use of LLMs for Illicit Purposes: Threats, Prevention Measures, and Vulnerabilitiescited by 76
- 2024A New Era in LLM Security: Exploring Security Concerns in Real-World LLM-based Systemscited by 74
- 2024When LLMs Meet Cybersecurity: A Systematic Literature Reviewcited by 70
- 2024Risk Taxonomy, Mitigation, and Assessment Benchmarks of Large Language Model Systemscited by 63
- 2023GenAI Against Humanity: Nefarious Applications of Generative Artificial Intelligence and Large Language Modelscited by 40
- 2024AI Hallucinations: A Misnomer Worth Clarifyingcited by 34
- 2023Make Them Spill the Beans! Coercive Knowledge Extraction from (Production) LLMscited by 26
12 most cited of 100 All 100 (JSON)
- 2026MalTree: Tracing Malware Evolution from Embeddings at Scale4 Jun 2026
- 2026TriEval: A Resource-Efficient Pipeline for LLM Bias, Toxicity, and Truthfulness Assessment2 Jun 2026
- 2026Cyber Threat Intelligence for Artificial Intelligence Systems5 Mar 2026
- 2026A Privacy by Design Framework for Large Language Model-Based Applications for Children19 Feb 2026
- 2026Investigating Writing Professionals' Relationships with Generative AI: How Combined Perceptions of Rivalry and Collaboration Shape Work Practices and Outcomes9 Feb 2026
- 2026PriMod4AI: Lifecycle-Aware Privacy Threat Modeling for AI Systems using LLM4 Feb 2026
- 2026Comparative Insights on Adversarial Machine Learning from Industry and Academia: A User-Study Approach4 Feb 2026
- 2025A Customer Journey in the Land of Oz: Leveraging the Wizard of Oz Technique to Model Emotions in Customer Service Interactions26 Nov 2025
- 2025Semantic Superiority vs. Forensic Efficiency: A Comparative Analysis of Deep Learning and Psycholinguistics for Business Email Compromise Detection26 Nov 2025
- 2025Securing Generative AI in Healthcare: A Zero-Trust Architecture Powered by Confidential Computing on Google Cloud14 Nov 2025
- 2025A cybersecurity AI agent selection and decision support framework2 Oct 2025
- 2025Privy: Envisioning and Mitigating Privacy Risks for Consumer-facing AI Product Concepts27 Sep 2025
12 newest of 100 All 100 (JSON)