DO THE MATH: HOW WE TOOK OVER CHATGPT ACCOUNTS

Summary from the TLDR DevOps newsletter

Researchers found a vulnerability that allowed them to take over ChatGPT accounts just by sending a victim a link. The exploit chain combined a MathLive keyboard feature and the HTML Preview to bypass the sandbox, allowing malicious code to run as chatgpt.com and access private conversations. OpenAI fixed the issue on October 26 and classified the report as P1.