3 casos · pág. 1/1
Researchers at Hacktron disclosed a vulnerability chain in OpenAI's ChatGPT Atlas Chromium-based AI browser that lets an attacker monitor all open tabs and capture OAuth authorization codes for any site, effectively breaking the same-origin policy. Atlas exposes Mojo IPC bindings to all .chatgpt.com and .openai.com origins, so a single XS…
Hacktron published a vendor blog post comparing its AI pentesting platform against XBOW and Aikido, using the benchmark target from a Doyensec head-to-head report (sponsored by Aikido). Doyensec scanned the open-source projects Fider and Photoview at $4,000 per repo per platform. The author ran Hacktron on Fider v0.33.0, at an estimated c…
On July 25, 2026, Hacktron researchers chained a heap buffer overflow in libheif (reached through ImageMagick in Discourse's image-upload pipeline) with an OpenAI SSO weakness. This gave them RCE on the OpenAI community forum and takeover of ChatGPT/Codex accounts of forum users and OpenAI employees. To prove impact without reading sensit…
