Tag: chatgpt
-
ChatGPT Operator Prompt Injection Exploit Leaks Private Data
According to recent findings by cybersecurity researcher Johann Rehberger, OpenAI’s ChatGPT Operator, an experimental agent designed to automate web-based tasks, faces critical security risks from prompt injection attacks that could expose users’ private data. In a demonstration shared exclusively with OpenAI last month, Rehberger showcased how malicious actors could hijack the AI agent to extract…
-
CISO success story: How LA County trains (and retrains) workers to fight phishing
Tags: ai, awareness, breach, business, chatgpt, cio, ciso, cloud, compliance, computing, control, corporate, cybersecurity, data, dos, election, email, endpoint, government, hacker, healthcare, incident response, jobs, law, lessons-learned, malicious, marketplace, network, phishing, privacy, regulation, risk, risk-management, service, software, strategy, supply-chain, tactics, technology, threat, tool, training, vulnerability(The following interview has been edited for clarity and length.)At first glance, LA County’s reporting structure who reports to whom seems, well, fairly complex.We have a federated model: I report to the county CIO. Each department acts as an independent business and has its own department CIO and information security officer. Their job is to…
-
OpenAI Developing Its Own Chip to Reduce Reliance on Nvidia
OpenAI, the organization behind ChatGPT and other advanced AI tools, is making significant strides in its efforts to reduce its dependency on Nvidia by developing its first in-house artificial intelligence chip. According to the source, OpenAI is finalizing the design of its first-generation AI processor, which is expected to be sent for fabrication in the…
-
Top 5 ways attackers use generative AI to exploit your systems
Tags: access, ai, attack, authentication, awareness, banking, captcha, chatgpt, china, control, cyber, cybercrime, cybersecurity, defense, detection, exploit, extortion, finance, flaw, fraud, group, hacker, intelligence, LLM, malicious, malware, network, phishing, ransomware, resilience, service, spam, tactics, theft, threat, tool, vulnerability, zero-dayFacilitating malware development: Artificial intelligence can also be used to generate more sophisticated or at least less labour-intensive malware.For example, cybercriminals are using gen AI to create malicious HTML documents. The XWorm attack, initiated by HTML smuggling, which contains malicious code that downloads and runs the malware, bears the hallmarks of development via AI.”The loader’s…
-
Datenleck durch GenAI-Nutzung
Tags: ai, chatgpt, ciso, compliance, data-breach, gartner, LLM, risk, strategy, tool, training, vulnerabilityViele Mitarbeiter teilen sensible Unternehmensdaten, wenn sie generative KI-Apps anwenden.Laut einem aktuellen Bericht über Gen-AI-Datenlecks von Harmonic enthielten 8,5 Prozent der Mitarbeiteranfragen an beliebte LLMs sensible Daten, was zu Sicherheits-, Compliance-, Datenschutz- und rechtlichen Bedenken führte.Der Security-Spezialist hat im vierten Quartal 2024 Zehntausende von Eingabeaufforderungen an ChatGPT, Copilot, Gemini, Claude und Perplexity analysiert. Dabei stellte…
-
Neue KI-Modelle im Visier von Cyberkriminellen
Qwen und DeepSeek ermöglichen die Erstellung bösartiger Inhalte mit wenigen Einschränkungen. Während ChatGPT seinen Missbrauchsschutz verbessert hat, bieten diese Modelle kaum Widerstand. Das macht sie besonders für weniger erfahrene Angreifer attraktiv, die fertige Skripte und Tools nutzen. First seen on itsicherheit-online.com Jump to article: www.itsicherheit-online.com/news/cybersecurity/neue-ki-modelle-im-visier-von-cyberkriminellen/
-
Cyberangriff? OpenAI untersucht potenzielles Leck von 20 Millionen Nutzerdaten
Cyberkriminelle behaupten, private Daten von Millionen OpenAI-Konten gestohlen zu haben. Forscher sind skeptisch, der ChatGPT-Hersteller ermittelt in dem Fall. First seen on heise.de Jump to article: www.heise.de/news/Cyberangriff-OpenAI-untersucht-potenzielles-Leck-von-20-Millionen-Nutzerdaten-10275538.html
-
KI-Missbrauch: Hacker nutzen DeepSeek und Qwen bereits
Nach dem Start der neuen KI-Modelle DeepSeek und Qwen beobachten Sicherheitsexperten einen alarmierenden Trend: Hacker wechseln gezielt von ChatGPT zu diesen Plattformen, um bösartige Inhalte zu entwickeln. First seen on it-daily.net Jump to article: www.it-daily.net/it-sicherheit/cybercrime/ki-missbrauch-hacker-nutzen-deepseek-und-qwen-bereits
-
Hacker nutzen Deepseek und Qwen bereits zur Entwicklung bösartiger Inhalte aus
Check Point Software Technologies sieht bereits den ersten Missbrauch der neuen KI-Modelle: nach dem Start von Deepseek und Qwen beobachteten Sicherheitsforscher von Check Point Research (CPR), dass Cyber-Kriminelle schnell von ChatGPT zu diesen neuen Plattformen wechselten, um bösartige Inhalte zu entwickeln. Hacker tauschen sich darüber aus, wie sie die Modelle manipulieren und unzensierte Inhalte anzeigen…
-
DeepSeek Compared to ChatGPT, Gemini in AI Jailbreak Test
DeepSeek’s susceptibility to jailbreaks has been compared by Cisco to other popular AI models, including from Meta, OpenAI and Google. The post DeepSeek Compared to ChatGPT, Gemini in AI Jailbreak Test appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/deepseek-compared-to-chatgpt-gemini-in-ai-jailbreak-test/
-
Deepseek tritt die nächste Welle des KI-Rushs los
Mit Deepseek wurde die nächste Welle des KI-Rushs ausgelöst. Der Open-Source-KI-gestützte Chatbot macht OpenAI Konkurrenz. Mit jeder KI-Innovation rücken allerdings auch wieder deren Auswirkungen auf den Datenschutz in den Vordergrund. Dementsprechend sollte auch bei diesem Tool vor der Einführung ein genauerer Blick auf Datenschutzüberlegungen erfolgen. Die Engines von Tools wie ChatGPT und jetzt auch Deepseek…
-
ChatGPT’s Deep Research Breakthrough Enables Faster-Than-Human Task Handling
OpenAI has introduced >>Deep Research,
-
Web Security: Gefahren der KI und Zero Day-Schwachstellen im Fokus
GenAI-Plattformen, wie ChatGPT und Midjourney, haben den Arbeitsplatz revolutioniert, aber 2024 hat auch gezeigt, wie riskant sie sein können, wenn es um den Umgang mit sensiblen Informationen geht. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/web-security-gefahren-der-ki-und-zero-day-schwachstellen-im-fokus/a39632/
-
GhostGPT: ChatGPTs böser Bruder
Sicherheitsforscher von Abnormal Security haben einen unregulierten KI-Chatbot namens GhostGPT entdeckt, der offenbar speziell für den Einsatz bei cyberkriminellen Machenschaften entwickelt wurde. First seen on 8com.de Jump to article: www.8com.de/cyber-security-blog/ghostgpt-chatgpts-boser-bruder
-
OpenAI launches ChatGPT plan for US government agencies
In a week dominated by headlines about China’s growing AI competitiveness, OpenAI has launched ChatGPT Gov. The new version of the AI-powered chatbot platform is designed to provide U.S. government agencies an additional way to access the tech. ChatGPT Gov includes many of the capabilities found in OpenAI’s corporate-focused tier, ChatGPT Enterprise. Using the platform, agencies…
-
OpenAI launches ChatGPT plan for U.S. government agencies
In a week dominated by headlines about China’s growing AI competitiveness, OpenAI has launched ChatGPT Gov. The new version of the AI-powered chatbot platform is designed to provide U.S. government agencies an additional way to access the tech. ChatGPT Gov includes many of the capabilities found in OpenAI’s corporate-focused tier, ChatGPT Enterprise. Using the platform, agencies…
-
Cybersecurity-Prognosen für KI in 2025
Mit den rasanten Fortschritten der künstlichen Intelligenz (KI) steht das Jahr 2025 an der Schwelle zu einer radikalen Neugestaltung der Cybersicherheitslandschaft. KI-Technologien werden von Cyberkriminellen und staatlichen Akteuren als Waffen eingesetzt, wodurch neue und ernsthafte Bedrohungen für die Cybersicherheit entstehen. Die Einführung von KI-Technologien schreitet mit beispielloser Geschwindigkeit voran. ChatGPT beispielsweise erreichte nur 60 Tage…
-
Breach Roundup: Researchers Find Flaws in Palo Alto Firewalls
Also: US Prosecutors Charge Suspected North Korean IT Worker Collaborators. This week, researchers spied Palo Alto firewall flaws, a North Korean IT worker conspiracy, ChatGPT as DDoS vector. Chinese hackers targeted a VPN maker, a fake PyPi package and a Russian threat actor shifted tactics. BreachForums admin faces prison and scammers used the release of…
-
GhostGPT Jailbreaked ChatGPT that Creates Malware Exploits
Artificial intelligence (AI) tools have revolutionized how we approach everyday tasks, but they also come with a dark side. Cybercriminals are increasingly exploiting AI for malicious purposes, as evidenced by the emergence of uncensored chatbots like WormGPT, WolfGPT, and EscapeGPT. The latest and most concerning addition to this list isGhostGPT, a jailbroken variant of ChatGPT…
-
You are Not Alone, ChatGPT is Down
ChatGPT Outage: Service Down on Jan 23, 2025. Learn about the potential causes (DDoS or technical glitch) and… First seen on hackread.com Jump to article: hackread.com/you-are-not-alone-chatgpt-is-down/
-
‘Severe’ bug in ChatGPT’s API could be used to DDoS websites
The vulnerability, described by a researcher as “bad programming,” allows an attacker to send unlimited connection requests through ChatGPT’s API. First seen on cyberscoop.com Jump to article: cyberscoop.com/ddos-openai-chatgpt-api-vulnerability-microsoft/
-
ChatGPT-Lücke ermöglicht DDoS-Attacken
srcset=”https://b2b-contenthub.com/wp-content/uploads/2025/01/shutterstock_2560810077.jpg?quality=50&strip=all 3696w, b2b-contenthub.com/wp-content/uploads/2025/01/shutterstock_2560810077.jpg?resize=300%2C168&quality=50&strip=all 300w, b2b-contenthub.com/wp-content/uploads/2025/01/shutterstock_2560810077.jpg?resize=768%2C432&quality=50&strip=all 768w, b2b-contenthub.com/wp-content/uploads/2025/01/shutterstock_2560810077.jpg?resize=1024%2C576&quality=50&strip=all 1024w, b2b-contenthub.com/wp-content/uploads/2025/01/shutterstock_2560810077.jpg?resize=1536%2C864&quality=50&strip=all 1536w, b2b-contenthub.com/wp-content/uploads/2025/01/shutterstock_2560810077.jpg?resize=2048%2C1152&quality=50&strip=all 2048w, b2b-contenthub.com/wp-content/uploads/2025/01/shutterstock_2560810077.jpg?resize=1240%2C697&quality=50&strip=all 1240w, b2b-contenthub.com/wp-content/uploads/2025/01/shutterstock_2560810077.jpg?resize=150%2C84&quality=50&strip=all 150w, b2b-contenthub.com/wp-content/uploads/2025/01/shutterstock_2560810077.jpg?resize=854%2C480&quality=50&strip=all 854w, b2b-contenthub.com/wp-content/uploads/2025/01/shutterstock_2560810077.jpg?resize=640%2C360&quality=50&strip=all 640w, b2b-contenthub.com/wp-content/uploads/2025/01/shutterstock_2560810077.jpg?resize=444%2C250&quality=50&strip=all 444w” width=”1024″ height=”576″ sizes=”(max-width: 1024px) 100vw, 1024px”>Über eine HTTP-Anfrage an die ChatGPT-API können Angreifer eine Zielwebseite mit Tausenden Netzwerkanfragen bombardieren. miss.cabul Shutterstock.comDer Sicherheitsforscher Benjamin Flesch hat kürzlich herausgefunden, dass eine Lücke im ChatGPT-Crawler für…
-
ChatGPT API flaws could allow DDoS, prompt injection attacks
OpenAI-owned ChatGPT might have a vulnerability that could allow threat actors to launch distributed denial of service (DDoS) attacks on unsuspecting targets. According to a discovery made by German security researcher Benjamin Flesch, the ChatGPT crawler, which OpenAI uses to collect data from the internet to improve ChatGPT, can be tricked into DDoSing arbitrary websites. “ChatGPT crawler…
-
Almost 10% of GenAI Prompts Include Sensitive Data: Study
A study by cybersecurity startup Harmonic Security found that 8.5% of prompts entered into generative AI models like ChatGPT, Copilot, and Gemini last year included sensitive information, putting personal and corporate data at risk of being leaked. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/01/almost-10-of-genai-prompts-include-sensitive-data-study/
-
Researchers Used ChatGPT to Discover S3 Bucket Takeover Vulnerability in Red Bull
Bug bounty programs have emerged as a critical avenue for researchers to identify vulnerabilities in digital platforms. One such success story involves a recent discovery made within the Red Bull bug bounty program, where a security researcher utilized ChatGPT to craft a domain monitoring script that ultimately led to the identification of a significant Amazon…
-
ChatGPT Crawler Vulnerability Abused to Trigger Reflexive DDoS Attacks
Security researchers have uncovered a severe vulnerability in OpenAI’s ChatGPT API, allowing attackers to exploit its architecture for launching Reflective Distributed Denial of Service (DDoS) attacks. This loophole, characterized by a high severity CVSS score of 8.6, raises significant concerns regarding the scalability and security of AI services deployed on cloud platforms, specifically Microsoft’s Azure.…