TLDR InfoSec · ATTACKS & VULNERABILITIES

CHATGPT VULNERABILITY EXPLOITED AGAINST US GOVERNMENT ORGANIZATIONS

securityweek.com3 min read

Summary from the TLDR InfoSec newsletter

Hackers exploited an SSRF vulnerability in ChatGPT's pictureproxy.php file, enabling unauthorized requests. There were over 10,000 attacks from one IP focused on the US government and financial institutions in a week.