Third-Party ChatGPT Plugins Could Lead to Account Takeovers
According to cybersecurity researchers, threat actors attempting to obtain unauthorized access to sensitive data may use third-party plugins for OpenAI ChatGPT as a new avenue of attack.
New study from Salt Labs suggests that security holes in ChatGPT and its ecosystem could let attackers install malicious plugins without users' permission and take over accounts on unaffiliated websites like GitHub.
As the name suggests, ChatGPT plugins are programs created to operate on top of the large language model (LLM) in order to retrieve current data, do calculations, or access external services.
Since then, OpenAI has also released GPTs, customized variants of ChatGPT designed to meet certain use cases and lessen reliance on outside services read more Third Party ChatGPT Plugins Could Le...