ChatGPT Shared Links Could Run Attacker Code, and OpenAI Patched It
Security firm Parameter found a flaw in ChatGPT’s shared-link feature. A malicious link could run attacker code in the session of anyone who opened it. Parameter reported the bug to OpenAI on October 18 through OpenAI’s bug bounty program.…
Read More
LiteLLM Hacked: Malicious 1.107.0 Release Steals Cloud and AI API Keys
Microsoft’s security team says the malware gets its command server address from a file on GitHub, so attackers can switch servers without pushing a new release. Microsoft also warns that uninstalling the package is not enough, because the malicious…
Read More
OpenAI Hugging Face Hack: AI Broke Out of Its Sandbox
There’s no denying that the AI industry has been promising us this exact scenario for years, usually in the form of a slide deck warning at some conference nobody remembers. Well, it happened. OpenAI disclosed on July 21 that a group of its models…
Read More