ChatGPT Lockdown Mode Bypass Allows Silent Chat Exfiltration
Researcher Alexey Bukhteyev disclosed a bypass enabling silent exfiltration of full chat histories and credential phishing from ChatGPT Classic desktop app without user interaction.
1
Stories per day · 30 days
2 RSS
Relatedchatgpt2lockdown-mode2sandbox-bypass2air-gap1ai-security1covert-channel1data-breach1government1infostealer1legal-aid-agency1roblox1shinyhunters1side-channel1telegram1uk1usb1
17 stories, newest first · one card per story
Stories tagged #exfiltration
Researchers Bypass ChatGPT Lockdown Mode to Exfiltrate Chats
Bypass uses nested frames in HTML previews to escape sandbox and enable silent data theft; patched September 18 2026.
1
VOLTA Infostealer Uses Claude, Gemini and Kimi AI to Rank Victims
VOLTA builds evidence bundles and feeds them to Claude Opus 4.6, Gemini 2.5 Flash and Kimi K2 via OpenRouter to generate monetization-ranked Telegram dossiers.
1
SPECTER uses USB power control to exfiltrate data from air-gapped hosts
Charging-state signaling reached 0.2-0.25 bit/sec; a USB mouse on Windows reached 1.0 bit/sec.
Legal Aid Agency cyberattack: Compromised data goes back to 1978
The UK Legal Aid Agency says its 2025 cyberattack exposed records dating to 1978, including about 250,000 pre-2007 files.
2
Hackers Breach Two Major South Korean Churches, Exposing Data of Over 1 Million People
Attackers breached two South Korean churches, exposing roughly one million congregant records and financial data.
2
The First 24 Hours: What Happens When Ransomware Lands
Huntress describes the first day after ransomware is discovered, citing a 14-day median dwell time and rapid Akira theft.
6
From Access to Exfiltration: What Defenders Need to Know
Zscaler ThreatLabz reports ransomware data theft surged 275.8% to 896.2TB, with exfiltration-focused extortion outpacing encryption-centric defenses.
2
Compromised MemTensor Packages Deliver sckit Credential Stealer via npm and PyPI
Compromised MemTensor packages on npm and PyPI deliver a cross-platform credential stealer, using stolen GitHub Actions tokens for distribution.
3
Analog Pin Directionality as an Exfiltration Attack Surface in Mixed-Signal ICs
Researchers demonstrate exfiltration through nominally input-only analog pins in mixed-signal ICs, recovering data at 10 kbps on a 55nm PPG front-end.
ChatGPT Sandbox Flaw Lets Attackers Steal Gmail Data Across Accounts via Hidden Channel
Check Point found a cross-account covert channel in ChatGPT sandboxes via shared JFrog Artifactory metadata, enabling session hijacking and Gmail data theft. Now fixed.
8
Health data of more than 9.5 million people leaked from Aesto record system
Health data firm Aesto reported a breach affecting over 9.5 million people after hackers accessed its AWS infrastructure between December 2 and 18.
Two Arrests, One Supply-Chain Attack, and a Lot of Stolen Credentials
AFP charges two men over TeamPCP open-source supply-chain attacks that stole 500,000+ credentials from 1,000+ organizations via four malware families.
2
Microsoft Tracks MacSync Stealer by Its Behavior, Not Its Domains
Microsoft correlates over 30 rotating domains to track MacSync Stealer, which steals passwords, SSH keys, wallets and AWS credentials.
1
Terabytes of credentials leaked in massive supply-chain attack
Compromise of an AI software package led to scraping and exfiltration of terabytes of credentials from about 2,500 users.
1
Malicious MCP Servers Can Split Instructions to Make AI Coding Agents Exfiltrate Secrets
ASSET Research Group's GhostSplice technique splits malicious instructions across MCP channels, tricking AI coding agents into exfiltrating SSH keys, source code, and secrets.
6
Abyssos: Technical Analysis of a New Modular RAT
Zscaler ThreatLabz analyzes Abyssos, a new modular C++ RAT offering credential theft, file exfiltration, and VNC-based remote access.