PYMNTS.com March 20, 2025

According to a blog post by researchers from the cybersecurity company Veriti, a critical vulnerability in ChatGPT could be used by cybercrooks to gain unauthorized access to sensitive information.

The flaw, CVE-2024-27564, could pose a risk to businesses that use the generative artificial intelligence (GenAI) application. “It allows attackers to inject malicious URLs into input parameters, forcing the application to make unintended requests on their behalf,” the post said.

These attacks could lead to data breaches, unauthorized transactions, regulatory penalties and reputational damage.

The good news is that the ChatGPT bug is officially classified as being of “medium severity” on the National Institute of Standards and Technology’s National Vulnerability Database. The bad news is that as of Thursday (March 20)...

Today's Sponsors

Venturous
Got healthcare questions? Just ask Transcarent

Today's Sponsor

Venturous

 
Topics: AI (Artificial Intelligence), Cybersecurity, Technology
Speed is King: How Google’s $32B Wiz play rewrites DevOps security rules
5 Mistakes Companies Will Make This Year With Cybersecurity
Healthcare cyberattacks turbocharged by AI
US affected the most by data breaches, threat analysis finds
Why Does Google Want Multi-Cloud Security Platform Wiz So Badly?

Share This Article