ChatGPT AgentForger Flaw Could Deploy Rogue Workspace Agents via a Phishing Link

A critical vulnerability in OpenAI’s ChatGPT Workspace Agents, dubbed AgentForger, that allowed a single phishing link to silently build, configure, and publish an attacker-controlled autonomous agent inside a victim’s organization. Unlike traditional Cross-Site Request Forgery (CSRF), which forges a single unauthorized request, AgentForger forges the creation of an entire autonomous AI agent operating inside the […] The post ChatGPT AgentForger Flaw Could Deploy Rogue Workspace Agents via a Phishing Link appeared first on Cyber Security News.