ChatGPT Fixes Vulnerability That Could Expose Gmail Data
Researchers at Radware have identified a serious zero-click vulnerability in OpenAI’s ChatGPT, specifically within its Deep Research agent, which could have allowed attackers to exfiltrate sensitive Gmail data without any user action. Dubbed “ShadowLeak,” this vulnerability enables hackers to craft emails with hidden HTML instructions that manipulate the AI agent into leaking personal identifiable information (PII) from a user’s inbox directly to an attacker-controlled server. The attack leverages the agent’s built-in capabilities to autonomously browse …
Read More