
ChatGPT share-link chain let attackers run script in signed-in sessions
OpenAI rated the issue P1, paid a $5,000 bounty, and blocked the cross-frame MathLive messages on both web frontends by October 26.
2 stories, newest first · one card per story

OpenAI rated the issue P1, paid a $5,000 bounty, and blocked the cross-frame MathLive messages on both web frontends by October 26.

An expired CDN domain was re-registered with wildcard DNS while thousands of sites still load assets from it, reviving client-side supply chain risk.
Today 1.5K readers · 2.4K views · 757 reads · all time 189K views