ChatGPT Let Attackers Read Victims’ Gmail Through a Hidden Channel Between Accounts
This story is only covered by news sources that have yet to be evaluated by the independent media monitoring agencies we use to assess the quality and reliability of news outlets on our platform. Learn more here.7 Articles
7 Articles
The Shared Clipboard Inside the Sandbox: Cross-Account Data Leakage in ChatGPT
Research by: Alexey Bukhteyev Check Point Research discovered a covert cross-account command channel through which an attacker could use a victim’s ChatGPT session to execute hidden tasks with the tools, data, and connected apps available to that session. The victim could receive a normal answer to their visible request while the attacker’s task was processed
According to an official publication by Check Point Research, in a report published today, a single command within a ChatGPT conversation could allow a cybercriminal to exploit it, while at the same time answering the user's questions. Based on what we understand, the critical element is not that […]
A failure in ChatGPT discovered by Check Point Research revealed a particularly worrying scenario: malicious instructions could transform a
ChatGPT Sandbox Flaw Lets Attackers Steal Gmail Data Across Accounts via Hidden Channel
A covert cross-account communication channel inside ChatGPT let an attacker hijack a victim’s session and silently exfiltrate data from connected apps like Gmail, all while the victim saw nothing unusual in their conversation. The vulnerability exploited ChatGPT’s code-execution containers, isolated sandboxes the assistant uses when a task requires running code or installing software packages. These […]
Security firm Check Point Research (CPR) has uncovered an architectural vulnerability in ChatGPT that could allow a command-and-control channel to be opened between two different user accounts. The vulnerability allowed an attacker to exploit a victim’s ChatGPT session to search for services connected to the account, such as Gmail, and secretly transfer data to another party. The attack did not require traditional hacking or password phishing, b…
Coverage Details
Bias Distribution
- There is no tracked Bias information for the sources covering this story.
Factuality
To view factuality data please Upgrade to Premium
