Researchers are paid $5K for reporting a bug to OpenAI that would let attackers run code in logged-in sessions of all who opened the hacker's ChatGPT share link
THE SO WHAT
AI assistants are now a first-class attack surface—session hijack via a shared chat link turns every embedded UI and plugin into a potential lateral-movement vector. Treat assistant share links and embeds like you would OAuth scopes or SSO: lock down origins, review permissions, and get your security team testing these flows this week.
READ THE SOURCE
MORE FROM THE WIRE
Deep & Emerging TechNASA’s Begging the Commercial Space Industry to Save the Doomed Hubble Telescope
NASA leaning on commercial partners to rescue Hubble is another data point that core scientific infrastructure is now contingent on private launch and servicing capacity. If you depend on space-based data or comms, treat commercial provider health and policy alignment as part of your operational risk model.
Deep & Emerging TechBinance says it has covered 90% of its hack losses, having set aside $6.34B+ of company funds; the remaining 10% is in less liquid tokens
Binance backfilling over $6.34B in hacked assets underscores that large crypto venues are effectively self‑insured balance sheets with liquidity risk attached. If you hold operational or treasury exposure on exchanges, reassess counterparty risk and the real-time liquidity of any “covered” assets.
Deep & Emerging TechElegoo M1 Ultra 3D Scanner review
High-accuracy handheld 3D scanning at prosumer pricing pushes more fabrication, repair, and reverse-engineering work in-house. If you run a small shop or product team, this is another nudge to audit which external CAD/scan services you can replace with local capability.
Deep & Emerging TechAI startup hacks Anthropic, gains access to employee details, internal messages
An AI startup reportedly breaching a major lab in 12 hours and pulling employee data and internal messages is a reminder that model builders are now prime targets — and peers may be the adversary. If you run an AI org, treat internal comms, identity systems, and dev tools as crown jewels, not back-office IT.