#Vulnerability

• ChatGPT Account Takeover: One Shared Link Was Enough, Researchers Say

  A research team found a way to hijack any ChatGPT account with a single shared conversation link. OpenAI patched the flaw on October 26 and classified it as P1.

• Python Pillow Flaw Lets Attackers Run Code via Just a Filename

  A critical vulnerability discovered in Python's Pillow library enables remote command execution through nothing more than a maliciously crafted EPS filename.