InfoSecBulletin Cybersecurity for mankind
Sharing personal secrets with an AI chatbot can be risky. In early August, many were stunned to find that thousands of ChatGPT conversations were publicly accessible through search engines like Google.
While OpenAI reacted promptly and removed the dangerous sharing functionality, the incident reveals the unsettling truth that people trust AI chatbots way too much.
Researchers show new technique to bypass AI safety guardrails in Grok and Gemini
About thousands of leaked AWS keys Held Full Admin Rights
US Bank investigates LockBit’s Data Breach Claims
Five new malware families actively targeting Asian Gov.t infra
T-Mobile Cuts Cables to Remove Chiness Salt Typhoon Hackers from Network
Splunk, Zyxel Patch Multiple Flaws Enabling RCE and Root Command Execution
“Zombie Card” attack revels expired Visa card may be used for contactless payments
Critical Zimbra RCE Flaw Actively Exploited in the Wild
Operation CameraSwarm
A single hacker compromise 1400+ Dahua camera worldwide
Cl0p Ransomware Listed 40+ Victims of PTC Windchill Campaign
SafetyDetectives, a cybersecurity firm, found that ChatGPT users frequently share private and sensitive information with the AI.
Researchers analyzed 1,000 leaked conversations with over 43 million words. They found several chats containing personally identifiable information (PII), including full names, addresses, and ID numbers.
“The negative impact of oversharing with ChatGPT goes beyond the psychological, emotional, and mental factors. Real-world safety concerns are also substantial,” wrote the researchers.
“Not only could PII be used for identity theft and fraud, but delicate details about a user’s life may be used for social engineering scams or blackmail.”
The researcher found that the most common topics were education, law, and law enforcement. These topics aren’t sensitive, but their frequency shows that users are turning to AI assistants for professional-level technical knowledge.
Common chatbot topics include relationships, health, financial advice, and distress.
“We recommend extra vigilance when engaging with chatbots and other AI platforms that don’t have clear privacy disclosures or guarantees,” say the researchers.
“PII and other sensitive information shouldn’t be shared with these services, as there have yet to be clear and strict user protection regulations when it comes to AI use.” To read out the full report click here.
Breaking the Passkey: SquareX Discloses Major Passkey Vulnerability at DEF CON 33
