ChatGPT flaw lets attackers hijack accounts with one link
Researchers demonstrated that a malicious shared ChatGPT conversation could steal private chats and exfiltrate data via one crafted link; OpenAI fixed the issue on October 26.
Stories per day · 30 days
2 RSS
4 stories, newest first · one card per story
Stories tagged #session-hijack
One Hidden Meta Muse Setting Could Let Attackers Turn the AI Assistant Into a Backdoor
Patrick Wardle's PoC shows local Mac malware can redirect Meta Muse dictation and hijack granted access.
Cisco Identity Services Engine 802.1X Session Hijack and Information Disclosure Vulnerabilities
Cisco patched Identity Services Engine flaws letting unauthenticated local attackers bypass 802.1X authentication or disclose sensitive information.
CVE-2026-57967: Apache Artemis, Apache ActiveMQ Artemis: Missing authentication on CORE protocol session reattachment
CVE-2026-57967: unauthenticated attackers can hijack authenticated ActiveMQ Artemis sessions via crafted CORE protocol SESSION_REATTACH packets.