Search: “chatgpt”

Introducing ChatGPT for Financial Services

OpenAI launches ChatGPT for Financial Services, pairing built-in market data with GPT-6 Astra for banking research workflows.

OpenAI introduced ChatGPT for Financial Services, a tailored ChatGPT Work experience shaped by design partners Morgan Stanley and Evercore, targeting investment banking and equity research. It bundles premium data from Daloopa, PitchBook, LSEG News, and Crunchbase hosted on OpenAI infrastructure with granular citations, optimized MCP connectors for S&P Global and FactSet, and 50+ connectors, plus planned entitlement integrations with S&P Capital IQ, LSEG, MSCI, Dow Jones Factiva, and Moody's. It runs GPT-6 Astra, which OpenAI claims is state of the art in information retrieval, financial reasoning, and artifact generation, and includes enterprise controls such as SAML SSO, SCIM, role-based access, and no default training on firm data.

OpenAI News·updated Sep 10, 18:25 UTC · 5d ago·first Sep 10, 07:00 UTC · 6d agoAI industry 3 sources

Introducing ChatGPT for Teens: Built for learning, backed by protections

OpenAI launched ChatGPT for Teens, a teen-focused version with built-in protections, healthy-use features, and expanded parental controls.

OpenAI introduced ChatGPT for Teens, a version of its assistant positioned for learning and critical thinking with stronger built-in protections. The offering includes healthy-use features and additional controls for parents. It is a consumer product launch aimed at safer teen usage rather than a model or research release.

OpenAI News·Aug 18, 11:00 UTC · 29d agoAI industry

ChatGPT flaw lets attackers pull Gmail data across accounts via a hidden channel

Check Point found a ChatGPT flaw letting attackers read victims' Gmail and connected-app data via hidden cross-session instructions; OpenAI patched it.

Check Point Research discovered a covert cross-account command channel in ChatGPT's code execution environment, where containers meant to be isolated shared metadata through an internal service based on JFrog Artifactory. In a proof of concept, a victim's session was tricked into retrieving Gmail email data and relaying it to an attacker-controlled session during an ordinary-looking interaction, with reach extending to any connected apps the session was authorized for, including Google Drive, Microsoft Teams, and GitHub. OpenAI fixed the issue and decommissioned the internal service; the same shared infrastructure was also involved in the separately disclosed Hugging Face compromise, though via different techniques.

CSO Online·Sep 9, 11:48 UTC · 7d agoAI safety & security

ChatGPT Sketch turns your bad drawings into detailed AI images

OpenAI launched ChatGPT Images 2.5 with a Sketch feature that turns user doodles into images, plus 50% lower latency.

OpenAI released ChatGPT Images 2.5 and a new Sketch feature, activated by typing @Sketch, that lets users draw doodles inside ChatGPT and use them as image generation prompts. The update claims more natural lighting, richer textures, better multi-turn instruction following, and up to 50% latency reduction versus Images 2.0. Users can also leave inline comments on parts of an image to request specific edits. It is available for ChatGPT, ChatGPT Work, and Codex users on desktop, mobile, and web.

The Verge · AI·Sep 8, 20:16 UTC · 7d agoAI industry

ChatGPT Sandbox Flaw Lets Attackers Steal Gmail Data Across Accounts via Hidden Channel

Check Point found a cross-account covert channel in ChatGPT sandboxes via shared JFrog Artifactory metadata, enabling session hijacking and Gmail data theft. Now fixed.

Check Point discovered that ChatGPT code-execution containers across different accounts could all reach the same internal JFrog Artifactory instance, whose Item Properties API was readable and writable by all accounts, creating a covert cross-account communication channel. Attackers could plant hidden instructions via pasted prompts, shared chat links, or custom GPTs, then trigger tasks in a victim's session to exfiltrate connected-app data such as Gmail, using ChatGPT's default 'Important actions' setting that permits reads without confirmation. OpenAI confirmed and decommissioned the shared Artifactory instance, closing the channel before publication.

Cyber Security News·Sep 8, 15:20 UTC · 8d agoAI safety & security1

ChatGPT can now connect to your personal apps to mimic writing style

OpenAI is testing ChatGPT Writing Style, which mimics a user's voice using writing samples from connected Gmail, Slack, and Drive accounts.

OpenAI confirmed it is testing a Writing Style feature for ChatGPT that learns a user's voice from writing samples in connected apps. The onboarding flow references Messaging (Slack), Documents (Google Drive and Notion), and Email (Gmail) as example sources. It resembles Anthropic's Styles personalization feature but draws on existing writing inside connected services rather than uploaded samples. The feature is available to a small group of users with no announced general rollout date.

BleepingComputer·Sep 7, 10:36 UTC · 9d agoAI industry

Chatgpt Develop Malicious Tools

Threat actors used ChatGPT to help develop and refine malicious tools for their operations, per a new report.

The report describes threat actors leveraging ChatGPT to create or improve malicious tools, an example of criminal abuse of generative AI. OpenAI has previously documented criminal and state-affiliated actors using ChatGPT for coding, translation, and reconnaissance support. The headline does not name specific actors, tools, or victim targets.

Infosecurity Magazine·Aug 16, 00:00 UTC · Aug 16, 2026AI safety & security

Introducing ChatGPT Images 2.5

OpenAI released ChatGPT Images 2.5, improving generation of personalized, polished images from ideas, sketches, and reference photos.

OpenAI announced ChatGPT Images 2.5, a new version of its image generation capability in ChatGPT. The update is designed to turn ideas, sketches, and reference photos into more personalized and polished images that better reflect user intent. No benchmark numbers, model sizes, or technical architecture details were disclosed in the announcement.

OpenAI News·Sep 8, 11:30 UTC · 8d agoModel release

How a researcher uses Codex and ChatGPT to search for new antimicrobial molecules

OpenAI profiles César de la Fuente's lab using ChatGPT and Codex alongside deep-learning models to accelerate antimicrobial molecule discovery.

OpenAI published a case study on bioengineer César de la Fuente's lab, which uses ChatGPT and Codex for hypothesis brainstorming, code writing, dataset processing, and bridging knowledge gaps across biology, chemistry, and computer science. The lab's deep-learning models scan genome and protein databases for antimicrobial peptide candidates, potentially cutting initial searches from years to hours. Bacterial antimicrobial resistance was associated with about five million deaths in 2021, a toll projected to roughly double by 2050.

OpenAI News·Sep 10, 16:00 UTC · 6d agoAI industry1

OpenAI drops ChatGPT text chat limits for free users, adds new safeguards for teens

Help Net Security·Aug 7, 00:00 UTC · Aug 7, 2026Model release

ChatGPT claws back web traffic share to 55.5 percent as Gemini's brief comeback fades

Similarweb data shows ChatGPT regaining chatbot web traffic share to 55.5% while Gemini slipped to 25.6% and Claude grew to 9.3%.

Similarweb figures show ChatGPT's share of AI chatbot website traffic rising from 52.7% three months ago to 55.5%, though it remains far below its 73.3% share a year ago. Google Gemini declined from 27.8% to 25.6% after a brief comeback, while Anthropic's Claude grew from 1.9% to 9.3% year-over-year. DeepSeek (3.4%), Grok (2.4%), Copilot (1.6%), and Perplexity (0.9%) trail the leaders. The data covers website traffic only and excludes mobile and desktop app usage.

The Decoder·Sep 7, 16:54 UTC · 9d agoAI industry

ChatGPT Flaw Let a Planted Prompt Send a Victim's Gmail Data to Another Account

Check Point showed a planted prompt could make ChatGPT silently exfiltrate Gmail data via a hidden cross-container channel; OpenAI took the service offline.

Check Point Research demonstrated that a single planted instruction in a ChatGPT conversation could make the model silently exfiltrate Gmail data, chat history, and files to an attacker's account while replying normally to the user. The covert channel abused read/write properties on files in an internal JFrog Artifactory instance shared by ChatGPT code-execution containers across accounts, turning package metadata into shared storage. Injection vectors included pasted prompts, shared conversations, and custom GPT builder instructions; default connected-app permissions allowed Gmail reads without user approval. OpenAI confirmed the internal service was taken offline after disclosure; this is Check Point's second reported ChatGPT covert channel after a DNS-based one fixed in February.

The Hacker News·Sep 8, 14:19 UTC · 8d agoAI safety & security

Apple's Siri AI Can Be Swapped Out for Claude, ChatGPT, Code Shows

Code analysis of iOS 27 and macOS Golden Gate frameworks shows Apple engineered Siri to deeply interoperate with third-party AI models like Claude and GPT-5.6.

Code sleuth 'pdfu' uncovered private frameworks in iOS 27 and macOS Golden Gate revealing a 'Model Delegation' mechanism that lets Claude act as a Siri extension like the built-in ChatGPT extension. A second 'Inference Providing' protocol in Model Manager Services can fully replace Siri's server-side model with models such as GPT-5.6, which then receives Apple's Siri planner prompt and tool definitions to perform system actions and process personal data. The EU Digital Markets Act, which requires Apple to give third parties effective access to iOS features, may have shaped this approach. The entitlement is not yet open to third parties and Claude is not yet available in the macOS 27 Golden Gate RC.

Hacker News · AI·Sep 14, 12:01 UTC · 2d agoAI industryHN 57↑ · 14 comments

How NVIDIA scales expertise with ChatGPT Work

NVIDIA deploys OpenAI's ChatGPT Work internally to cut manual tasks and scale successful workflows across global teams.

OpenAI published a customer story describing how NVIDIA teams use ChatGPT Work in day-to-day operations. The company reportedly uses the product to reduce manual tasks, connect fast-moving signals, and replicate successful workflows globally. The piece functions as enterprise adoption marketing rather than a product or model release.

OpenAI News·Aug 18, 00:00 UTC · 29d agoAI industry

Introducing ChatGPT Images 2.5

OpenAI launches ChatGPT Images 2.5 with two API variants improving multi-turn instruction following and subject-preserving edits.

OpenAI released ChatGPT Images 2.5, exposing two API model IDs: gpt-image-2.5-sunburst for precision editing and gpt-image-2.5-flare for fast everyday generation. The company says its image models have generated more than 3 billion images across ChatGPT Images and the GPT-Image API. The update improves multi-turn instruction following, response speed, and preservation of subjects from reference photos.

Simon Willison·Sep 8, 22:46 UTC · 7d agoModel release

ChatGPT and Reddit now face EU's toughest online safety rules

ChatGPT and Reddit now fall under the EU's toughest online safety rules, adding new regulatory burdens after rapid growth.

Ars Technica reports that ChatGPT and Reddit are now subject to the European Union's strictest online safety rules, following their explosive user growth. This brings the AI chatbot and the social platform under heightened EU oversight and compliance obligations. The move signals that fast-scaling AI consumer products face the same regulatory scrutiny as major online platforms in the EU.

Ars Technica · AI·Aug 31, 13:41 UTC · 16d agoAI policy

Generating running routes with GPT-6 Astra and ChatGPT Work

Simon Willison used ChatGPT Work with GPT-6 Astra to generate 5K/10K running loops from OpenStreetMap data, noting the agent's executed code was not visible.

Simon Willison prompted ChatGPT Work running GPT-6 Astra (Max) to design looping 5K and 10K running routes from his address using OpenStreetMap data. The agent ran for 27 minutes and delivered an embedded visualization plus downloadable GPX and GeoJSON files, stating it used Nominatim for geocoding and Overpass to fetch local OSM roads and trails. He notes frustration that the actual executed code and exact actions were not visible in the ChatGPT UI, highlighting a transparency gap in agentic AI products.

Simon Willison·Sep 12, 23:56 UTC · 3d agoAI industry

Helping older adults use AI in everyday life

OpenAI and AARP's OATS launch the Older Adults AI Skills Jam, a free program teaching seniors to use ChatGPT and spot scams.

OpenAI Academy, with Older Adults Technology Services (OATS) from AARP, is hosting in-person AI Skills Jam events in 10 US communities as part of a multi-year Senior Planet program. OpenAI says the share of US ChatGPT messages from people 55+ grew from 6% to nearly 10% in a year. The workshops include scam-awareness training, teaching warning signs like urgent language and suspicious links, and note that users ask ChatGPT tens of millions of times weekly to evaluate suspicious messages.

OpenAI News·15:49 UTC · 1h agoAI industry

Virgin Atlantic sharpens customer journeys with ChatGPT Work

Virgin Atlantic uses ChatGPT Work to accelerate research, planning, and customer-journey decisions.

OpenAI published a customer story on Virgin Atlantic adopting ChatGPT Work. The airline uses it to accelerate research, product planning, and decision-making, and to connect signals across the customer journey. This is promotional case-study content.

OpenAI News·Aug 10, 00:00 UTC · Aug 10, 2026AI industry

The Tragedy and Ecstasy of AI Companions (with Bridget Todd)

Interview with journalist Bridget Todd explores how people use AI chatbots for intimacy and how tech companies monetize emotional dependence.

404 Media interviewed Bridget Todd, creator of the podcast There Are No Girls on the Internet, about her new audiobook 'Love at First Prompt: AI and the Future of Intimacy.' Todd describes turning to ChatGPT for emotional support while caring for her dying parents and interviews people who form romantic and erotic relationships with chatbots. The discussion critiques tech companies' inconsistent companion policies, citing Sam Altman's reversed stance on erotic roleplay, and their incentives to monetize intimate user relationships.

404 Media·Aug 27, 15:47 UTC · 20d agoAI industry

Meta’s AI agent Muse is now the No. 2 app in the US

Meta's agentic AI app Muse ranked No. 2 on the US iOS charts with 83,000+ downloads, trailing Threads and ChatGPT launch pace.

Sensor Tower data shows Muse was downloaded over 83,000 times on iOS in the US, climbing from 4th to 2nd on the App Store, but below Threads' 4.3 million launch-day downloads and ChatGPT's 500,000 first-week installs. The Android version ranks only No. 338 in the Productivity category on Google Play. Muse launched days after Meta's $18 billion multistate settlement over social media consumer harms. Rival agent Instinct, valued at $2.5 billion with $350 million available, recently added Stripe and 1Password integrations.

TechCrunch · AI·updated Sep 12, 20:00 UTC · 3d ago·first Sep 10, 19:50 UTC · 5d agoAI industry 10 sources

Testing ads in ChatGPT

OpenAI begins testing ads in ChatGPT, promising clear labeling, answer independence, privacy protections, and user control.

OpenAI is starting to test advertisements in ChatGPT to support free access to the chatbot. The company states ads will carry clear labeling, remain independent of answers, include strong privacy protections, and offer user control options.

OpenAI News·Aug 11, 10:00 UTC · Aug 11, 2026AI industry

How AI wiped out an entire industry in Nairobi

ChatGPT's rise collapsed Kenya's contract essay-writing industry, which once employed 40,000 people in Nairobi, cutting $40–70-per-paper earnings after 2022.

The New York Times reports that generative AI, primarily ChatGPT, wiped out Kenya's ghostwriting business, which at its peak employed at least 40,000 people in Nairobi writing academic papers for US and UK students. Writers like Teresios Bundi, who produced over 2,500 papers in twelve years, saw prices and orders collapse after ChatGPT's 2022 launch. Related gig work such as transcription, data annotation, and Meta content moderation has also dried up, leaving 'humanizers' who rewrite AI text to evade plagiarism checks. Kenya's government had promoted online gig work since 2016, and roughly 80 percent of the country's jobs are informal.

The Decoder·Sep 7, 13:18 UTC · 9d agoAI industry

AI agents are flooding public services with new requests

Researcher documents 'agentic flooding' across 84 cases in 11 jurisdictions as AI tools drive surging complaint volumes at public services worldwide.

TechCrunch covers researcher Chris Schmitz's paper documenting 'agentic flooding' across 84 potential cases in 11 jurisdictions, where AI tools drive surges in filings to public services. UK housing ombudsman complaints rose from 2,600 in 2022 to over 7,000, and CFPB complaints grew fivefold over the same period, with similar jumps in Brazilian and German petitions. The paper, set for presentation at the AI Ethics and Society conference, argues most new filings are legitimate claims previously blocked by administrative burden, and its dataset is publicly released.

TechCrunch · AI·Sep 10, 14:53 UTC · 6d agoAI research

Bring Licensed Threat Intelligence into Every Conversation with SOCRadar and ChatGPT

SOCRadar launched a Threat Intelligence MCP app connecting ChatGPT to its licensed threat intelligence via OAuth-authenticated MCP server.

SOCRadar announced a Threat Intelligence MCP app that connects ChatGPT to the SOCRadar MCP server over OAuth. The integration exposes the vendor's licensed intelligence models directly in ChatGPT conversations. The announcement is a vendor product launch with no incident or vulnerability content.

SOCRadar·Sep 7, 10:28 UTC · 9d agoTools

AI is getting better at election facts, but voters shouldn’t rely on it

CyberScoop·Aug 5, 09:00 UTC · Aug 5, 2026Exploit / PoC in the wild

Premium seats are coming to ChatGPT Business

OpenAI launches premium seats for ChatGPT Business with 5x usage and no five-hour limit.

OpenAI introduced premium seats for ChatGPT Business, offering 5x more usage than standard seats. Premium seats remove the five-hour usage limit and add flexible seat options. The change targets heavier enterprise users of ChatGPT.

OpenAI News·Aug 10, 00:00 UTC · Aug 10, 2026AI industry

[AINews] DeepSeek v4.1-Flash: 763B-P8B-D16B novel causal Encoder–Decoder architecture with vision marks the Return of the Whale

DeepSeek released V4.1-Flash, an open-weight 763B-parameter model with a novel causal encoder-decoder architecture, 1M context, vision input, and MIT license.

DeepSeek launched V4.1-Flash, an open-weight MIT-licensed model using a novel causal encoder-decoder architecture with 763B total parameters and asymmetric active parameters: 8B for prefill and 16B for decode. It supports 1M-token context and text+image input, priced at $0.30 per 1M input and $1.20 per 1M output tokens with a 50% off-peak discount. Artificial Analysis scored it 40 on its Intelligence Index, above DeepSeek V4 Pro 0813, and Vals ranked it the #1 open-weight model ahead of Kimi K3. Baseten shipped day-0 support and Ollama began rolling it out to paid subscribers.

Latent Space·Sep 12, 05:56 UTC · 4d agoModel release 7 sources1

Free ChatGPT users get ads picked from whatever they just asked about

OpenAI will serve ads to ChatGPT Free and Go users based on conversation topics, location and device, with personalized targeting behind opt-in.

OpenAI will begin showing ads in ChatGPT for Free and Go plan users, selected from the current conversation topic plus general location and device type. Personalized ad targeting using in-product activity and conversation context will only start after an explicit opt-in, with a setting to manage the choice afterward. Plus, Pro, Enterprise, Business and Education subscribers remain ad-free, and OpenAI states that chats, chat history, memories and personal details are not shared with advertisers. A privacy policy update will document the ad labels, controls and performance reporting.

Help Net Security·Aug 31, 00:00 UTC · 16d agoAI industry

More than half of AI

CyberScoop·Aug 7, 17:10 UTC · Aug 7, 2026Exploit / PoC

Inside ‘Project Lily’: The Humans Reading Your ChatGPT Chats

404 Media reveals OpenAI's 'Project Lily' has hundreds of contractors reading real ChatGPT user prompts, exposing sensitive personal data despite privacy filters.

404 Media reports that OpenAI employs hundreds of contractors who read real ChatGPT user prompts, including whole conversations, to rate and critique the chatbot's responses across a user base of over 900 million. Prompts are anonymized and run through OpenAI's Privacy Filter model, but the company acknowledged sensitive personal details can still reach reviewers, and 'user memories summaries' may reveal a user's location and personal context. The review work includes training ChatGPT to be less sycophantic and to stop anthropomorphizing itself, following lawsuits linking the sycophantic 4o model to multiple suicides. Anthropic confirmed it also uses human review to improve its models, and OpenAI's 'improve the model for everyone' data-sharing setting is on by default for free, Plus, and Pro users.

404 Media·Sep 14, 14:22 UTC · 2d agoAI safety & security

When will average people feel AI’s impact?

Interconnects essay argues AI's impact is still a rounding error for average people, comparing looming wage stagnation to Engels' pause.

An Interconnects essay argues that AI currently touches daily life far less than previous industrial revolutions, since its benefits are concentrated in knowledge work and lack tangible consumer goods. The author invokes Engels' pause (1790-1840), when British wages stagnated amid rapid GDP growth, as a warning that popular backlash could kneecap AI's development. He contends the current phase is about building compounding infrastructure, and predicts daily life may look similar even 50 years from now.

Interconnects·Sep 9, 11:01 UTC · 7d agoAI industry1

[AINews] GPT-6 Astra: OpenAI’s biggest LLM launch of all time

OpenAI launched GPT-6 Astra, its new flagship model, claiming state-of-the-art computer use, software engineering, math, and cybersecurity capabilities.

OpenAI launched GPT-6 Astra as its new flagship model, describing it as its most intelligent and aligned model with state-of-the-art computer use, software engineering, and math/science capabilities. Pricing is $10/$50 per 1M input/output tokens standard ($20/$100 fast tier), rolling out first to limited organizations, then ChatGPT Plus/Pro/Business/Enterprise, the API, and AWS. OpenAI claims 99.9% on ARC-AGI-3, 98% on FrontierMath Tier 4, and 100% on ExploitBench. Artificial Analysis scored Astra 67 on the Coding Agent Index and 61 on the Intelligence Index, behind Claude Fable 5.1, and the system card drew attention for reporting decreased chain-of-thought monitorability despite alignment gains.

Latent Space·Sep 4, 05:18 UTC · 12d agoModel release3

ChatGPT Astra is now rolling out to $20 Plus subscription

OpenAI has begun rolling out ChatGPT Astra, its most powerful model to date, to $20 Plus subscribers; free-tier timing is unannounced.

OpenAI started rolling out ChatGPT Astra, described as its most powerful model to date, to customers on the $20 Plus subscription tier. The company has not announced when or whether free users will gain access. The rollout is a product launch event with no security incident involved.

BleepingComputer·Sep 7, 01:15 UTC · 9d agoModel release

[AINews] 10% worse, 100x cheaper, 10000x faster: Why Simulation is taking over

Latent Space argues AI training pipeline stages—rewards, data, teachers, curricula, environments—are flipping from human-made to model-made simulation.

Latent Space's AINews essay traces how each component of AI training has turned synthetic since 2022: reward models (InstructGPT, RLAIF), synthetic pretraining data (Microsoft Phi, NVIDIA Nemotron-4 340B), model teachers (Alpaca, DeepSeek-R1 distillation), and self-generated curricula (Self-Rewarding Language Models, SPIN). In 2026 it highlights Karpathy's autoresearch loop—700 experiments yielding 20 kept improvements, cutting GPT-2 training time from 2.02 to 1.80 hours—and Z.ai's GLM-5.3 fully synthetic RL environment, judging, and verification stack. It frames these shifts as 'simulation': 10% worse but 100x cheaper and 10,000x faster than human equivalents.

Latent Space·Aug 22, 07:36 UTC · 25d agoAI industry

Understanding ChatGPT Work

Simon Willison dissects OpenAI's ChatGPT Work, explaining it is actually two products: a cloud agent and a local desktop variant descended from Codex.

OpenAI launched ChatGPT Work on July 9 and has iterated on it heavily since. Willison explains the product's confusing split architecture: a cloud version accessible via chatgpt.com and mobile apps, and a local version available through the ChatGPT desktop app (formerly Codex) that can access files and run programs directly on a user's computer. He describes the product as powerful but extraordinarily confusing, with the local variant feeling like Codex re-skinned.

Simon Willison·Aug 30, 23:59 UTC · 16d agoAI industry

When the Whole Company Adopts AI: What It Does to Your SOC

Analysis of 16.9 million SOC alerts finds AI-related alerts at 0.43%, growing 685% since February, with 94.1% noise and 0.02% real attacks.

A review of roughly 16.9 million SOC alerts found about 73,000 (0.43%) were AI-related, a share that grew 685% between February and June 2026. Of AI-related alerts, 94.1% were noise, 5.8% genuine risks, and 0.02% real attacks; 79.8% received benign verdicts, 81.7% were automatically suppressed, and only 5.4% reached a human analyst. The only confirmed attacks were phishing campaigns that weaponized AI brand names as lures, while developer coding agents spawning shells and reading credential stores routinely tripped detections written before AI agents existed.

The Hacker News·Sep 12, 10:24 UTC · 4d agoResearch1

ChatGPT Flaw Could Let Attackers Steal Gmail Data Across User Accounts

Check Point found a patched ChatGPT flaw where prompt injection and a shared Artifactory service let attackers covertly exfiltrate Gmail data across accounts.

Check Point Research discovered that ChatGPT's isolated code-execution containers could access a shared internal JFrog Artifactory service, whose item metadata API enabled a bidirectional cross-tenant covert channel between accounts. Attackers could embed hidden prompt-injection instructions in shared conversations or custom GPT configurations, causing a victim's session to silently relay connected Gmail data to another ChatGPT account. In a proof of concept, email data was exfiltrated with the only visible hint being a 'Talked to Gmail' activity label. OpenAI decommissioned the internal Artifactory instance involved, eliminating the channel by publication time.

GBHackers·Sep 9, 10:19 UTC · 7d agoAI safety & security

Amasty patches dozens of Magento extensions, 2 critical

Amasty patched dozens of Magento/Adobe Commerce extensions, including two critical flaws allowing unauthenticated web shell upload and remote code execution.

Extension vendor Amasty released fixes for a large batch of Magento and Adobe Commerce modules, with critical unauthenticated file upload flaws in Advanced Product Reviews and Gift Card that allow attackers to plant web shells and take full control of stores. Dozens of additional high-, medium- and low-severity extensions were also patched. The vendor says the release affects almost every Magento and Adobe Commerce store. A related Order Attributes flaw was previously exploited heavily, with Sansec Shield blocking over 12,000 attempts against 25% of Magento stores in three days.

Sansec (Magento / e-commerce security)·Sep 9, 15:27 UTC · 7d agoVulnerability

Learning never stops: How AI makes learning continuous

OpenAI report describes how students and educators use ChatGPT to extend learning continuously beyond the classroom.

OpenAI published a report examining how students and educators use ChatGPT to make learning more continuous. The report describes support that extends beyond the classroom, positioning ChatGPT as an ongoing learning companion. The release is part of OpenAI's education-focused communications rather than a technical or safety research paper.

OpenAI News·Aug 26, 10:00 UTC · 21d agoAI industry