HACKING OPENAI

Summary from the TLDR newsletter

Researchers chained two critical vulnerabilities to compromise multiple OpenAI employees' ChatGPT accounts in July. The accounts could access internal OpenAI repositories and potentially many other connectors. They used one employee's Codex to open a PR in OpenAI's internal monorepo. This post provides a full timeline of the disclosure process and details about how the vulnerabilities were discovered.