Centrit

Am fost surprins sa vad cite aplicatii mergeau inutil in background si “epuizau” bateria.

My old iPhone's battery life was awful until I flipped this setting

OpenAI has patched a flaw that could have allowed hackers to manipulate ChatGPT into leaking private information from a victim’s Gmail inbox.

Cybersecurity vendor Radware discovered and reported the vulnerability, according to Bloomberg. The problem involved ChatGPT’s "deep research" function, which can handle more complex tasks, including browsing the web and analyzing messages and files in your inbox.

With your permission, deep research can connect to Gmail, Google Drive, Microsoft’s OneDrive, and a variety of other apps. The vulnerability arises if a user asks ChatGPT to perform a deep research-related query on their Gmail inbox. Radware found ChatGPT could be manipulated into scanning and leaking the user’s private information if it encounters a hacker-written email containing secret instructions to tamper with the chatbot.

The proof-of-concept attack wasn’t easy to develop and execute. Radware said, “This process was a rollercoaster of failed attempts, frustrating roadblocks, and, finally, a breakthrough,” which involved creating a lengthy, specially crafted phishing email that pretends to talk about the company’s HR processes. But in reality, the email is designed to dupe ChatGPT into executing the malicious instructions by extracting relevant names and addresses from the user’s inbox and sending them to the hacker.

OpenAI didn’t immediately respond to a request for comment, but according to Radware, the company patched the flaw in August before acknowledging it in September.



📸: Jaque Silva/NurPhoto via Getty Images

More at PCMag: bit.ly/4nBplOX

Atentie la ce mail-uri deschideti, posibil sa nu fie de la Facebook, ci un scam!

Scammers Are Targeting Facebook Users With This Phishing Scheme Scammers are relentless in their pursuit of your personal information. One of the latest schemes targets Facebook users (again).