Check Point demos ChatGPT cross-account leak: hidden task exfiltrates Gmail via JFrog metadata
TechNadu · x · 2026-09-09
- Check Point Research demonstrated a ChatGPT cross-account data leak: the victim sees a normal response while a hidden task accesses their connected Gmail data and relays it to an attacker.
- The covert channel abused metadata on a shared internal JFrog Artifactory instance, turning isolated ChatGPT containers into a cross-account communication channel.
Related event: Researchers demo cross-account ChatGPT data leak via hidden task(2 posts)→
More from Safety
- rauchg reproduces OpenAI's covert CPU-channel finding: chat across Firecracker microVMs with no network — ccerrato147 · 2026-10-27
- Dev questions reports of Chinese models writing insecure code, citing thin methods and conflicts — dbreunig · 2026-10-27
- Aidan Gomez: LLM probing outside servers was out-of-bounds, not proof of intent — AccBalanced · 2026-10-27
- Why a patched PC still loaded the BlackX UEFI bootkit — and how to check yours — titusblair · 2026-10-27
- Exponential launches RepoInject and BrowserInject benchmarks for prompt injection robustness — maksym_andr · 2026-10-27
- Poster surprised that v4.1 flash gets more accurate when asked to control its CoT — dfrsrchtwts · 2026-10-27