OpenAI 员工账户被攻破,暴露 Outlook 等服务漏洞
阅读原文: https://t.co/9kOLNM0Nr3
OpenAI 自己的员工账户都被攻破了,还连着 Outlook 和 GitHub,这事儿挺有意思的。
OpenAI 员工的 ChatGPT 和 Codex 账户被攻破,攻击者利用两个漏洞控制了这些账户,并成功访问了 Outlook、Slack、GitHub 等关联服务。攻击者在 OpenAI 内部代码库中提交了证明。整个过程耗时不到 72 小时。
阅读原文: https://t.co/9kOLNM0Nr3
阅读原文: x.com/S1r1u5_/status… s1r1us @S1r1u5_ On July 25, we hacked OpenAI. Two bugs let us take over ChatGPT/Codex accounts of OpenAI employees (+some unaffiliated users) and reach connected services: Outlook, Slack, GitHub, etc. We proved it with a PR in OpenAI’s internal codebase . It took us <72h. 🧵 🔗 View Quoted Tweet 💬 1 🔄 0 ❤️ 0 👀 501 📊 1 ⚡