AIThe Hacker News3h ago
Researchers are paid $5K for reporting a bug
Researchers are paid $5K for reporting a bug to OpenAI that would let attackers run code in logged-in sessions of all who opened the hacker's ChatGPT share link
TL;DROpenAI paid $5K for a bug letting attackers run code via malicious ChatGPT share links.
Why it matters: Session hijacking vulnerabilities threaten millions of ChatGPT users' data and account security.
A malicious ChatGPT share link could run an attacker's code in the logged-in session of anyone who opened it …
Read full articleSource: The Hacker News · Opens in new tab