March 14, 2024, 10:21 p.m. |

GovInfoSecurity.com RSS Syndication www.govinfosecurity.com

Potential Zero-Click Account Takeover Exploit Is Among Identified Vulnerabilities
Researchers at security firm Salt Security have uncovered multiple vulnerabilities in third-party plug-ins used in ChatGPT, including a zero-click account takeover flaw that was triggered when users attempted to install the plug-in using their ChatGPT accounts.

account accounts account takeover chatgpt click exploit flaw install party researchers salt salt security security takeover third third-party uncover uncovered vulnerabilities zero-click

Azure DevSecOps Cloud Engineer II

@ Prudent Technology | McLean, VA, USA

Security Engineer III - Python, AWS

@ JPMorgan Chase & Co. | Bengaluru, Karnataka, India

SOC Analyst (Threat Hunter)

@ NCS | Singapore, Singapore

Managed Services Information Security Manager

@ NTT DATA | Sydney, Australia

Senior Security Engineer (Remote)

@ Mattermost | United Kingdom

Penetration Tester (Part Time & Remote)

@ TestPros | United States - Remote