Security/privacy news

[acct]

OpenAI confirms new data breach, exposing names, emails, more | Windows Central

WWW.WINDOWSCENTRAL.COM

---

OpenAI is sending out emails this morning to confirm that a ton of user data has been exposed owing to a breach in a third-party web...

 

Quote

Another day, another security breach. This time, it's OpenAI's turn.

 

Today, users are waking up to discover emails from OpenAI's security team, confirming more security issues at the company. This one is a bit more egregious than previous breaches, exposing emails, names, and approximate locations of an undisclosed number of users.

 

OpenAI claims that ChatGPT users were unaffected, with chat content, API usage, passwords, payment details, and government IDs remaining safe. However, users of OpenAI's API interfaces at platform.openai.com have seen a variety of data exposed in this latest breach.

 

Here's what OpenAI claims has been exposed:

Names provided to accounts on platform.openai.com
Email addresses linked to the API accounts via platform.openai.com
"Coarse approximate location" determined by IP address and web browser
OS and browser type, as well as referring websites
Organizataions and user IDs saved into the API accounts

 

[minast]

North Korean infiltrator caught working in Amazon IT department thanks to lag — 110ms keystroke input raises red flags over true location | Tom's Hardware

WWW.TOMSHARDWARE.COM

---

A barely perceptible keystroke delay was the smoking gun that led to the uncovering of a malign imposter.

[EraserheadX]

Notepad++ Hijacked by State-Sponsored Hackers | Notepad++

NOTEPAD-PLUS-PLUS.ORG

 

[acct]

1 hour ago, EraserheadX said:

Notepad++ Hijacked by State-Sponsored Hackers | Notepad++

NOTEPAD-PLUS-PLUS.ORG

 

 

Είναι λίγο εκνευριστική η ενημέρωση. Καταρχάς είναι γεμάτη τυπογραφικά. Προσπερνώντας τα:

Quote

 

Traffic from certain targeted users was selectively redirected to attacker-controlled served malicious update manifests.

The incident began from June 2025. Multiple independaent security researchers have assessed that the threat acotor is likely a Chinese state-sponsored group, which would explain the highly selective targeting obseved during the campaign.

 

 

Πόσους χρήστες, ποιους, τι είδους δεδομένα; Καταλαβαίνω ότι δεν μπορούν να δημοσιοποιήσουν τα πάντα, αλλά χρειάζονται περισσότερες πληροφορίες για να καταλάβει κανείς πώς μπορεί να έχει εκτεθεί...