ChatGPT vulnerability allows hackers to record your sessions indefinitely [Video]

Facepalm: “The code is TrustNoAI.” This is a phrase that a white hat hacker recently used while demonstrating how he could exploit ChatGPT to steal anyone’s data. So, it might be a code we should all adopt. He discovered a way hackers could use the LLM’s persistent memory to exfiltrate data from any user continuously.

Security research Johann Rehberger recently discovered a way to use ChatGPT as spyware. He reported it to OpenAI, but the company brushed him off, calling it a “safety” rather than a security issue before closing his ticket.

Undeterred, Rehberger went to work building a proof-of-concept and opened a new ticket. This time, OpenAI developers paid attention. They recently issued a partial fix, so Rehberger figured it was safe to disclose the vulnerability finally. The attack, which Rehberger named “SpAIware,” exploits a relatively newer …