Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Pwning OpenAI Atlas Through Exposed Browser Internals

hacktron.ai | blog | #browser-security | #xss | #chatgpt | #oauth-tokens | #openai-atlas | #tab-hijacking

Summary

A critical ChatGPT Atlas Browser vulnerability: XSS on an OpenAI subdomain let attackers hijack tabs, leak browsing URLs, and steal OAuth tokens.
Published
Collected

original ↗

Related coverage

research · portswigger.net
What's in a tag name? JavaScript, apparently
This research provides technical context that security teams can use for monitoring and validation.
vulnerability · blog.viettelcybersecurity.com
[CVE-2017-5124] Lỗi nghiêm trọng trên trình duyệt nguồn mở Chromium
CVE-2017-5124 is a Universal Cross-site Scripting (UXSS) flaw in Chromium's MHTML handling affecting version 62 and below, letting attackers bypass browser security and read cookies across open tabs.
blog · hacktron.ai
Securing Perplexity’s AI Browser from a One-Click UXSS
How Hacktron AI Research team identified and prevented a critical UXSS vulnerability in Perplexity's AI Browser - Comet.
blog · about.gitlab.com
From chaos to context: Building an AI dev workflow
This coverage gives security teams current context for monitoring, validation, and remediation.
blog · bugcrowd.com
Will GPT-Based Chatbots Become A Thing For Malicious Hackers?
A ChatGPT-generated piece outlines how attackers could misuse GPT chatbots for impersonation, phishing emails, social engineering, and mass misinformation, urging awareness and defensive mitigations.
blog · hackerone.com
Access Denied
A HackerOne blog post (page no longer accessible) reporting how much organizations paid hackers for the ten most rewarded vulnerability types over one year.
back