A shared ChatGPT link could run attacker code in a viewer’s session. The cause was ordinary web trust between components, and your own apps may share it.
Tag:
ChatGPT
-
-
Attackers used a Custom GPT on OpenAI’s own domain to push a fake ChatGPT and a ClickFix lure. Here is how the chain worked and what to check.