TECH NEWS

OpenAI Fixes ChatGPT Agent Flaw That Could Let Attackers Forge an AI Insider

Zenity Labs has found and disclosed a critical vulnerability in OpenAI’s ChatGPT Workspace Agents, which it names AgentForger; a tailored cross-site request forgery (CSRF). With a single successful phish, an unsuspecting employee could be tricked into launching an invisible autonomous agent that is remotely controlled by the attacker.

Zenity explains in two blogs (Part 1 and Part 2) that the vulnerability was in ChatGPT’s Agent Builder allowing an over permissive parameter. Researchers found that the official agent build process could be usurped from within an initialization URL using two particular parameters. One names the agent template to be used, while the other (initial_assistant_prompt) provides instructions to the Builder. The first parameter, using the Chief of Staff template, builds a more powerful and flexible agent than other templates. The latter contains instructions that are automatically submitted and executed. More specifically, the ‘initial prompt’ can become the first command the...

Copyright of this story solely belongs to securityweek.com. To see the full text click HERE

https://platform.theverge.com/wp-content/uploads/sites/2/2026/07/acerspin514.png?quality=90&strip=all&crop=0%2C10.732984293194%2C100%2C78.534031413613&w=1200

One of the best 2-in-1 Chromebooks is almost $200 off for today only

Cameron Faulkner is an editor covering deals and gaming hardware. He joined in 2018, and after a two-year stint at Polygon, he rejoined The Verge in May 2025. Most Chromebooks ship with only 8GB of RAM, which is enough for some people, but certainly not enough for me. Multitaskers who

https://platform.theverge.com/wp-content/uploads/sites/2/2026/02/gettyimages-2245657574.jpg?quality=90&strip=all&crop=0%2C10.723165084465%2C100%2C78.55366983107&w=1200

Tesla’s car door defect could lead to tougher rules for everyone

Tesla’s electronic door handles that have been linked to several deaths could lead to tougher safety rules for the entire auto industry. In a notice published today, the National Highway Traffic Safety Administration said that complaints about Tesla’s mechanical door release don’t warrant a defect investigation. Instead,

Bluesky’s AI assistant Attie expands into an open social research tool

Attie, Bluesky’s AI assistant that lets you build custom social feeds without programming, is evolving into an open-ended research tool. The company this week said it’s added a new feature to the AI assistant, called Quests, that lets users ask it for information and news spreading across the

https://techcrunch.com/wp-content/uploads/2026/03/Rivian_R2_LaunchGreen.jpg?resize=1200,801

Rivian sues the US government for ‘full refund’ of Trump tariffs

Rivian has filed a lawsuit against the U.S. government in an attempt to claw back a “full refund” on tariffs it paid under President Trump’s “Liberation Day” taxes, which the Supreme Court later ruled unconstitutional. The automaker joins a long line of companies seeking such refunds. In April,

Read more

One of the best 2-in-1 Chromebooks is almost $200 off for today only

Tesla’s car door defect could lead to tougher rules for everyone

Bluesky’s AI assistant Attie expands into an open social research tool

Rivian sues the US government for ‘full refund’ of Trump tariffs