Simple Custom Font Rendering Can Poison ChatGPT, Claude, Gemini, and Other AI Systems

LayerX published a proof-of-concept for a novel attack that leverages custom fonts and CSS-based visual substitution to show malicious instructions to users while AI web assistants read only benign DOM text; multiple major AI assistants failed to detect the hidden payload and vendor responses to disclosure were inconsistent.