آسیب‌پذیری خطرناک ChatGPT چت‌های کاربر را از طریق لینک اشتراک‌گذاری فاش می‌کرد

شرکت OpenAI این باگ را برطرف و ۵۰۰۰ دلار پاداش به پژوهشگران کشف‌کننده آن اهدا کرده است. The post آسیب‌پذیری خطرناک ChatGPT چت‌های کاربر را از طریق لینک اشتراک‌گذاری فاش می‌کرد appeared first on دیجیاتو.

Vulnerabilities & Zero-Day
Read the full article at دیجیاتو Removal request

This page shows only the headline and the short summary. The full text is published by the original source.

Related news

Full archive →
Industrial Cyber

NIST sets post-quantum cryptography migration priorities, with 2030 deadlines for high-value federal systems

The U.S. National Institute of Standards and Technology (NIST) rolled out a finalized report to help organizations transition... The post NIST sets post-quantum cryptography migration priorities, with 2030 deadlines for high-value federal systems appeared first on Industrial Cyber.

CSO Online

A compromised DevOps laptop caused the $6.3B Binance breach

Cryptocurrency Exchange Binance blamed a compromised DevOps laptop for the loss of $6.3 billion in cryptocurrency last week, adding that it will now cover any losses faced by its customers. “Binance will cover all losses from the Secure Assets Fund for Users (SAFU) and the company’s funds,” the world’s largest cryptocurrency exchange said in an update on Friday, adding that user funds are safe and that it had found n…

Trail of Bits

Backporting security fixes at scale with Codex

Stable Linux releases lack existing security fixes because backporting them is time-consuming and often thankless work. We’re using Codex to reduce the backporting process time from days to hours per fix, empowering human patch reviewers to rapidly submit fixes for critical software like Ubuntu Long Term Support, Fedora, and the Linux kernel. By October 29, our project helped deliver fixes for 149 distinct CVEs into…

SOCRadar

Ivanti Connect Secure Zero-Day Chain Enables Root Access

A previously unknown threat actor tracked as UTA0576 chained three Ivanti Connect Secure zero-day vulnerabilities to run code as root on VPN appliances without logging in. The attacks began in early October 2026 and hit at least one appliance that was fully patched at the time. Ivanti says exploitation has affected a limited number of […]