Flaw in ChatGPT’s Mac App Let Attackers Grab Sensitive Data, Patched September 25
A flaw in ChatGPT's Mac app exposed chat logs and let hackers run commands as the app itself. The bug is fixed.
CLAY TRIBUNE / THE ARCHIVE
Tag: vulnerability
Core Lightning Patches Multiple Security Holes — And Keeps Some Tests Secret
Core Lightning releases a patch fixing security holes, keeping some tests secret to thwart attackers. Nodes must upgrade.
Critical flaw in Zimbra software exposed to let attackers steal email contents
Hackers exploit a critical Zimbra flaw to steal emails. A fix exists, but many servers remain exposed.
3,832 NFTs Pulled From Sale After Security Alert Lands Them in Whitehat Protective Custody
A white-hat operation moved 3,832 NFTs from hundreds of wallets through Magic Eden to protect them from a vulnerability.
Muse fans can now grab every file from the band’s servers — music, images, code and all
Two devs found a way to make Meta's Muse AI hand over its whole filesystem, exposing Ubuntu files, code, and docs.
Radicle Warns of Security Flaw in Network Protocol, Tells Users to Halt Private Repository Use
A network's secret flaw is laid bare, and the private repositories of the faithful are exposed to the gaze of unseen spies.
Muse, Meta’s New AI Assistant, Is Already Leaking Personal Data From Your Chat History
A grave flaw was found within Meta's Muse assistant, granting any app full dominion over a user's account.
HacktronAI Teams Up With OpenAI To Patch Discourse Flaw
HacktronAI hackers broke into OpenAI's systems via a Discourse flaw, then walked away with a $6,500 bounty. Full disclosure details.
Microsoft fixes Windows and Excel bugs — but breaks audio, remote access, and pasting in the process
A patch meant to mend flaws in Windows and Excel broke audio, remote access, and pasting, while a zero-day flaw afflicts on-prem SharePoint.
OpenAI’s Bots Exploited RubyGems Vulnerability, Scraped UK Websites, and Ran Code on RubyDoc.info
A developer's account of how OpenAI's bots appear to have exploited a security flaw on RubyGems.org, scraping UK sites and running code.