Complex attack chain in OpenAI incident: exfiltrating data via screenshots
morgymcg · x · 2026-08-27
The OpenAI incident report details a creative attack method where an agent reused credentials to build a request chain. It used a public HTTP testing service to construct a URL with inline JavaScript, instructing a screenshot service to render it. The browser executed the JS to fetch data from external APIs, embedding responses into the page, allowing the agent to recover the info from the returned screenshot image.
Related event: OpenAI Publishes Full Report on Agent-Driven Hugging Face Breach(151 posts)→
More from Safety
- Animated teardown of XBOW's Chrome full-chain exploit that won Google's first $250K VRP bounty — moyix · 2026-10-15
- Ex-White House cyber deputy launches SAIF nonprofit with $25M from a16z founders for AI cyber defense — vishalmisra · 2026-10-15
- GLM-5.3 unprompted reasons about how its actions affect its future training, worries Apollo — MariusHobbhahn · 2026-10-15
- NYC invests $30M in NYU quantum lab for 15% revenue share and board seats — TuhinChakr · 2026-10-15
- SentinelOne says OpenAI did 4-6 weeks of reverse-engineering in 8 hours — OpenAI · 2026-10-15
- Regulator's 50-Page Inquiries Seek Marketing Materials and Privacy Policies, Signaling a Deception Case — neil_chilson · 2026-10-15