InfoSecBulletin Cybersecurity for mankind
Sharing personal secrets with an AI chatbot can be risky. In early August, many were stunned to find that thousands of ChatGPT conversations were publicly accessible through search engines like Google.
While OpenAI reacted promptly and removed the dangerous sharing functionality, the incident reveals the unsettling truth that people trust AI chatbots way too much.
CISA alerts to cyberattacks affecting U.S. water utilities
“CyberStrike” AI-Driven Security Platform for Automated Testing
AIDCQ Propose to invest $2 billion in AI data center in Bangladesh
NVIDIA BlueField Flaw Enables Code Execution Attacks
Massive customer data from India’s Bank of Baroda surfaced online
Active Exploits Hit Fortinet, Arista: AI Discovered Linux Kernel Zero-Day
Sam Altman Claims AI “singularity” has arrived, Where Systems Improve by Themselves
Shinyhunters claimed and set deadline to publish E&Y data
Microsoft, NVIDIA and CrowdStrike Initiate Alliance for Open-Source AI Security
Google Search Results Reportedly Show Claude AI Shared Chats
SafetyDetectives, a cybersecurity firm, found that ChatGPT users frequently share private and sensitive information with the AI.
Researchers analyzed 1,000 leaked conversations with over 43 million words. They found several chats containing personally identifiable information (PII), including full names, addresses, and ID numbers.
“The negative impact of oversharing with ChatGPT goes beyond the psychological, emotional, and mental factors. Real-world safety concerns are also substantial,” wrote the researchers.
“Not only could PII be used for identity theft and fraud, but delicate details about a user’s life may be used for social engineering scams or blackmail.”
The researcher found that the most common topics were education, law, and law enforcement. These topics aren’t sensitive, but their frequency shows that users are turning to AI assistants for professional-level technical knowledge.
Common chatbot topics include relationships, health, financial advice, and distress.
“We recommend extra vigilance when engaging with chatbots and other AI platforms that don’t have clear privacy disclosures or guarantees,” say the researchers.
“PII and other sensitive information shouldn’t be shared with these services, as there have yet to be clear and strict user protection regulations when it comes to AI use.” To read out the full report click here.
Breaking the Passkey: SquareX Discloses Major Passkey Vulnerability at DEF CON 33
