TLDR InfoSec · MISCELLANEOUS
META FIXES BUG THAT COULD LEAK USERS' AI PROMPTS AND GENERATED CONTENT
Summary from the TLDR InfoSec newsletter
Meta fixed a security bug that allowed users to access other users' private AI prompts and responses by manipulating unique prompt numbers. Security researcher Sandeep Hodkasia discovered the vulnerability in December and received a $10,000 bug bounty. Meta deployed the fix in January after finding no evidence of malicious exploitation of the flaw.