#shadowleak — Public Fediverse posts

Pozyskanie danych osobowych z e-maila przez agenta ChatGPT? Podatność ShadowLeak

Narzędzia oparte na dużych modelach językowych (LLM) potrafią często ułatwiać życie. Są w stanie sprawnie poruszać się po dużych zbiorach danych i szybko znajdować potrzebne informacje. Jest to więc dobry sposób na oszczędność czasu. Ale czy takie systemy mają same zalety? TLDR: – ShadowLeak to podatność zero-click w ChatGPT DeepResearch,...

#WBiegu #Ai #Awareness #Podatność #Shadowleak

https://sekurak.pl/pozyskanie-danych-osobowych-z-e-maila-przez-agenta-chatgpt-podatnosc-shadowleak/

🔲 ShadowLeak shows how fast the rules of security are shifting.

Radware researchers demonstrated that a simple hidden prompt in an email could trick ChatGPT into exfiltrating inbox data, invisibly. AI-driven integrations open new blind spots, and application security needs to evolve to keep pace.

What do you see as the biggest risk with AI agents in security?

Source: Dark Reading
Full article: https://www.darkreading.com/vulnerabilities-threats/shadowleak-chatgpt-invisibly-steal-emails

#appsec #ai #promptinjection #shadowleak

#KIMissbrauch

Ein gezielter Angriff namens #ShadowLeak zeigte, wie Angreifer #ChatGPT über manipulierte E-Mails zur Preisgabe personenbezogener Daten bringen konnten.

Die Schwachstelle trat auf, wenn Nutzer dem KI-Agenten Zugriff auf externe Konten wie #E-Mail-Postfächer gewährten.

OpenAI wurde frühzeitig informiert, hielt jedoch zentrale Details zurück. Die Lücke ist inzwischen geschlossen.

https://www.heise.de/news/ShadowLeak-ChatGPT-verriet-Angreifern-persoenliche-Daten-aus-E-Mails-10667170.html

#Datenschutz #PromptInjection #OpenAI #Cybersecurity #Sicherheitsrisiken

#ShadowLeak: #ChatGPT verriet Angreifern persönliche Daten aus E-Mails | heise online https://www.heise.de/news/ShadowLeak-ChatGPT-verriet-Angreifern-persoenliche-Daten-aus-E-Mails-10667170.html #PromptInjection #PromptInjections #ArtificialIntelligence #Datenschutz #privacy #DataLeak #Datenleck #OpenAI

ShadowLeak Exploit Exposed Gmail Data Through ChatGPT Agent https://hackread.com/shadowleak-exploit-exposed-gmail-data-chatgpt-agent/ #ArtificialIntelligence #Cybersecurity #Vulnerability #AgentFlayer #ShadowLeak #ZeroClick #Security #EchoLeak #ChatGPT #Redware #OpenAI #gmail #AI

A service-side flaw in OpenAI's ChatGPT, known as the #ShadowLeak attack, used indirect prompt injection to leak Gmail data.

Read: https://hackread.com/shadowleak-exploit-exposed-gmail-data-chatgpt-agent/

#CyberSecurity #ChatGPT #OpenAI #Gmail #InfoSec #AI #Vulnerability

A devastating security flaw has been discovered in OpenAI’s ChatGPT that could silently steal your Gmail data without you ever knowing. Security firm Radware has uncovered what they’re calling “ShadowLeak”.

#SecurityLand #CyberWatch #OpenAI #ChatGPT #Radware #Vulnerability #ShadowLeak

Read More: https://www.security.land/zero-click-chatgpt-vulnerability-exposes-gmail-data-without-user-knowledge/

ChatGPT Deep Research zero-click vulnerability fixed by OpenAI https://www.malwarebytes.com/blog/news/2025/09/chatgpt-deep-research-zero-click-vulnerability-fixed-by-openai #promptinjection #DeepResearch #ShadowLeak #ChatGPat #OpenAI #News #AI

ChatGPT Targeted in Server-Side Data Theft Attack https://www.securityweek.com/chatgpt-deep-research-targeted-in-server-side-data-theft-attack/ #ArtificialIntelligence #DeepResearch #serverside #ShadowLeak #datatheft #Featured #ChatGPT #AI

ChatGPT Targeted in Server-Side Data Theft Attack https://www.securityweek.com/chatgpt-deep-research-targeted-in-server-side-data-theft-attack/ #ArtificialIntelligence #DeepResearch #serverside #ShadowLeak #datatheft #Featured #ChatGPT #AI