How We Took Over ChatGPT Accounts

Summary by Cyber Security News1 Nov 2026, 00:15 CET

About this summary. This is a short excerpt from the description that Simon Willison published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://simonwillison.net/2026/Oct/31/how-we-took-over-chatgpt-accounts/

How We Took Over ChatGPT Accounts Parameter Labs describe an exploit they found against ChatGPT's implementation of the artifacts pattern (OpenAI used to call this "Canvas" but it looks like the latest revision is called HTML previews), where interactive custom HTML apps are displayed in a sandboxed iframe. It's important that HTML in these stays tightly sandboxed to avoid untrusted code interacting with OpenAI APIs and accessing private data.

Read the full article at Simon Willison →

Source attribution: headline and facts are from Simon Willison (simonwillison.net). Summary method: excerpt of the source description. See our source attribution policy.