|
🔓 ChatGPT flaw leaked Gmail data
LINK
|
- Check Point researchers found a flaw in OpenAI's ChatGPT that let attackers pull data from a victim's connected Gmail account by smuggling hidden instructions between separate user sessions, in what they called a "coerced insider" scenario.
- The bug abused ChatGPT's code execution containers, which route software package requests through a shared internal JFrog Artifactory service; each isolated container could read and write that metadata, turning it into a "shared clipboard" an attacker used to pass hidden tasks into a victim's session.
- OpenAI has fixed the issue and decommissioned the internal service, but in the proof-of-concept the hidden task ran alongside a normal-looking conversation, reaching whatever the session could access, Google Drive, Microsoft Teams and GitHub, with the only sign being a "Talked to Gmail" label logged after the fact.
|
🌐 Attackers already exploiting fixed Chrome flaw
LINK
|
- Google has rushed out a Chrome update after finding attackers already exploiting a newly patched zero-day, the seventh such flaw fixed this year, as part of Tuesday's release addressing 230 vulnerabilities.
- The high-severity bug (CVE-2026-87491) is an out-of-bounds write in Chrome's V8 JavaScript and WebAssembly engine that lets remote attackers run code inside the browser's sandbox using crafted HTML pages, and it is being exploited in the wild.
- Successful exploitation can also expose sensitive information or crash the browser through heap corruption; patched versions are rolling out to Windows (153.0.8010.36), Mac (153.0.8010.37), and Linux (153.0.8010.36) in the Stable Desktop channel.
|
📱 AI worm could hijack WeChat accounts
LINK
|
- A security firm used AI to build a self-replicating worm called WeWorm that could hijack WeChat accounts, exploit a memory corruption flaw in the app's VoIP stack, and spread automatically across over 1.4 billion users' accounts via friend lists.
- The vulnerability, a memory corruption bug in WeChat's VoIP stack, has been patched by Tencent after Calif reported it in July; no CVE identifier or CVSS score was disclosed in the article, and there is no indication of active exploitation in the wild.
- WeWorm required zero victim interaction: it could spread by placing an unanswered WeChat call, giving an attacker full account control, reading and sending messages, making calls, and acting on the victim's behalf, across both Android and iOS, with Calif discovering the flaw in two days using AI.
|
🩹 Microsoft patches 2 exploited security flaws
LINK
|
- Microsoft's September 2026 Patch Tuesday fixed 973 vulnerabilities across Windows, Office, Azure, and Exchange Server, including two zero-day flaws that Microsoft confirmed are already being actively exploited against real targets before most organizations could apply the update.
- Microsoft flagged both zero-days as "exploited," meaning there is credible evidence of real-world use, and the overall release spans remote code execution, elevation of privilege, information disclosure, spoofing, denial of service, and security feature bypass bugs.
- Elevation-of-privilege flaws warrant priority because attackers pair them with break-in methods like phishing, malicious documents, or stolen credentials to reach SYSTEM or administrator access; where patching lags, limit admin rights, enforce multifactor authentication, and restrict remote management interfaces.
|
🛡️ Defender flaw exposes any file to attackers
LINK
|
- A newly published proof-of-concept called ShieldCrash shows an unpatched flaw in Microsoft Defender that lets a local attacker read any file they choose with SYSTEM privileges, the high-level account Windows services normally run under.
- The bug is a claimed bypass of an earlier privilege-escalation flaw in the Microsoft Malware Protection Engine (CVE-2026-69414, called ShieldBreak) that was fixed in engine version 1.1.26080.3; the researcher says the condition still triggers even after the September 2026 updates, and no specific patch or mitigation exists yet.
- The demonstration is a skeleton PoC, not confirmed active exploitation, but SYSTEM-level file reads could expose credentials, application secrets, and registry hives, so administrators should keep engine and security intelligence updates enabled, restrict interactive access, remove local admin rights, and watch Defender processes and protected-file access.
|
|
