[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fZdfJh2XL-iUi16VsxEg1eaTaGnsEfeQqYyZ3r5d8jns":3},{"article":4,"iocs":53,"watch_terms":54,"solutions":55,"lesson":131},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":30,"category":31,"article_tags":35},"166a0cd8-19d1-43af-bf31-3a4397858919","A Flaw in ChatGPT’s Mac App Could Have Let Hackers Grab Sensitive Data","a-flaw-in-chatgpt-s-mac-app-could-have-let-hackers-grab-sensitive-data-ca874f","While the focus has been on AI agents’ hacking capabilities, a recently patched vulnerability in a ChatGPT app shows that AI software is itself an inviting—and vulnerable—target.","A recently patched vulnerability in OpenAI's ChatGPT macOS app could have allowed attackers to gain full control of the application on a victim's machine. The flaw, discovered by Objective-See Foundation, enabled unprivileged code to access chat logs, browser sessions, and execute commands by exploiting a trusted script interpreter component. OpenAI has since released a fix, acknowledging the need to accelerate security practices as AI software becomes a more prominent target.","ChatGPT's Mac app had a vulnerability allowing attackers to access chat logs and run commands.","https:\u002F\u002Fwww.wired.com\u002Fstory\u002Fa-flaw-in-chatgpts-mac-app-could-have-let-hackers-grab-sensitive-data\u002F","https:\u002F\u002Fmedia.wired.com\u002Fphotos\u002F6abc2c32f3865c0127252ad0\u002Fmaster\u002Fpass\u002FGettyImages-2278945913.jpg","2026-10-02T09:45:00+00:00","2026-10-02T10:00:09.987869+00:00",8,[17,20,23,25,27],{"name":18,"type":19},"ChatGPT","product",{"name":21,"type":22},"OpenAI","vendor",{"name":24,"type":19},"Muse AI assistant",{"name":26,"type":22},"Meta",{"name":28,"type":29},"AI agents","technology","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":30,"icon":32,"name":33,"slug":34},null,"Vulnerabilities","vulnerabilities",[36,41,43,48],{"category":37},{"id":38,"icon":32,"name":39,"slug":40},"02371804-cf6d-4449-98de-f1a2d4d9b266","Tools","tools",{"category":42},{"id":30,"icon":32,"name":33,"slug":34},{"category":44},{"id":45,"icon":32,"name":46,"slug":47},"839da5c1-3c34-47e2-9499-f7201640e3ac","AI Security","ai-security",{"category":49},{"id":50,"icon":32,"name":51,"slug":52},"89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5","Malware","malware",[],[21,26,18],{"controls":56,"vendors":130},[57,78,101],{"slug":58,"name":59,"problem":60,"products":61},"endpoint-management","Device management (MDM and UEM)","Every company laptop and phone is known, encrypted, locked down and up to date.",[62,70],{"vendor_slug":63,"vendor_name":64,"vendor_logo":65,"product_slug":66,"product_name":67,"url":68,"description":69},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","intune","Microsoft Intune","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fmicrosoft-intune","Device management for Windows, macOS, iOS and Android, including update rings and compliance policies.",{"vendor_slug":71,"vendor_name":72,"vendor_logo":73,"product_slug":74,"product_name":75,"url":76,"description":77},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",{"slug":79,"name":80,"problem":81,"products":82},"application-allowlisting","Application allowlisting","Any program that reaches a computer can run, including ransomware and the remote-access tools attackers bring with them.",[83,91,96],{"vendor_slug":84,"vendor_name":85,"vendor_logo":86,"product_slug":87,"product_name":88,"url":89,"description":90},"threatlocker","ThreatLocker","\u002Fvendor-logos\u002Fthreatlocker.png","ringfencing","Ringfencing","https:\u002F\u002Fwww.threatlocker.com\u002Fcapabilities\u002Fringfencing","Limits what approved applications may do, such as which files, network locations and other programs they can reach, so a compromised application cannot be turned against you.",{"vendor_slug":84,"vendor_name":85,"vendor_logo":86,"product_slug":92,"product_name":93,"url":94,"description":95},"allowlisting","Allowlisting","https:\u002F\u002Fwww.threatlocker.com\u002Fcapabilities\u002Fallowlisting","Blocks any software that has not been approved, including ransomware and unapproved remote-access tools. A learning period builds the approved list first.",{"vendor_slug":63,"vendor_name":64,"vendor_logo":65,"product_slug":97,"product_name":98,"url":99,"description":100},"app-control-for-business","App Control for Business","https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fsecurity\u002Fapplication-security\u002Fapplication-control\u002Fapp-control-for-business\u002F","Application control built into Windows, formerly Windows Defender Application Control, with AppLocker as the older option. Policies can be managed through Intune.",{"slug":102,"name":103,"problem":104,"products":105},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[106,114,122],{"vendor_slug":107,"vendor_name":108,"vendor_logo":109,"product_slug":110,"product_name":111,"url":112,"description":113},"sentinelone","SentinelOne","\u002Fvendor-logos\u002Fsentinelone.png","singularity-endpoint","Singularity Endpoint","https:\u002F\u002Fwww.sentinelone.com\u002Fplatform\u002Fendpoint-security\u002F","Endpoint protection and detection with automated response and rollback.",{"vendor_slug":115,"vendor_name":116,"vendor_logo":117,"product_slug":118,"product_name":119,"url":120,"description":121},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","falcon-insight-xdr","Falcon Insight XDR","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Fendpoint-security\u002Ffalcon-insight-xdr\u002F","Endpoint detection and response with extended detection across other security tools.",{"vendor_slug":123,"vendor_name":124,"vendor_logo":125,"product_slug":126,"product_name":127,"url":128,"description":129},"elastic","Elastic","\u002Fvendor-logos\u002Felastic.png","elastic-security","Elastic Security","https:\u002F\u002Fwww.elastic.co\u002Fsecurity","SIEM and endpoint security built on Elasticsearch, with open detection rules.",[],{"slug":132,"title":133,"body":134,"framework_refs":135,"framework_notes":146},"chatgpt-macos-app-flaw-exposed-chat-logs-and-browser-sessions","ChatGPT macOS App Flaw Exposed Chat Logs and Browser Sessions","A vulnerability in OpenAI's ChatGPT macOS application allowed unprivileged code to hijack a trusted script interpreter component, granting attackers full control of the app and access to sensitive user data including chat logs and active browser sessions. The flaw highlights the risk of insufficient inter-process privilege separation in desktop AI applications, which are rapidly becoming high-value targets due to the sensitive data they handle. As AI tools are increasingly embedded into daily workflows, they expand the attack surface significantly — often before security practices have matured to match. OpenAI's response underscores a broader industry challenge: AI product development cycles frequently outpace security validation processes.",[136,137,138,139,140,141,142,143,144,145],"CIS Control 2: Inventory and Control of Software Assets","CIS Control 7: Continuous Vulnerability Management","CIS Control 10: Malware Defenses","NIST SP 800-53 SI-2: Flaw Remediation","NIST SP 800-53 AC-6: Least Privilege","NIST SP 800-53 SC-39: Process Isolation","NIST SP 800-53 AU-12: Audit Record Generation","GDPR Article 25: Data Protection by Design and by Default","GDPR Article 32: Security of Processing","MITRE ATT&CK T1059: Command and Scripting Interpreter",{}]