Incidents tagged OpenAI

New Gaslight macOS Malware Uses Prompt Injection to Disrupt AI-Assisted Analysis The Hacker News

A critical vulnerability in OpenAI's ChatGPT Atlas browser leverages a Cross-Site Request Forgery (CSRF) flaw to inject malicious instructions into the AI's persistent memory. This allows attackers to achieve arbitrary code execution and gain control over user accounts or systems across sessions, triggered by legitimate user interaction with the compromised AI.

The article highlights the significant risk of sensitive enterprise data leaks through the misuse of Large Language Models like ChatGPT. A prominent example is the April 2023 Samsung incident, where employees inadvertently exposed confidential source code and intellectual property by inputting it into the chatbot.