Researchers show a shared ChatGPT link could hijack signed-in sessions
Parameter researchers reported that an ordinary public ChatGPT share link could run attacker-written JavaScript inside the session of anyone who opened it. The chain combined a graph keyboard library that accepted cross-frame messages without checking the sender, an HTML preview that injected code into an unsandboxed frame, and a YouTube endpoint that got around the content security policy. Running as chatgpt.com, the code could list the victim's conversations, read private chats and send data to an outside server; in the most automatic variant, opening the link was the only required action. OpenAI reproduced the issue, raised it from P2 to P1, confirmed both frontends were fixed on 2026-10-26 and paid a $5,000 bounty after the 2026-10-18 report. The write-up does not say whether anyone was actually affected.
Sources & depth
Cisco Talos: the Volta infostealer asks an LLM to price its victims
Talos describes Volta, a mature Windows infostealer that steals credentials, session tokens and crypto-wallet data, then sends the haul to an LLM that writes a victim dossier with a "what they're worth" section ranking assets by tier. It falls back through Claude, then Kimi, then Gemini if one model refuses, which suggests the operator expected guardrails to block the request. Talos assesses that the operator is offloading analysis to AI and that the tool is sold as a builder, so less skilled buyers can use it too.
Sources & depth
Anthropic tightens Claude against game cloning, and users report over-blocking
Anthropic has changed Claude to refuse attempts to recreate or clone video games and to reverse-engineer them. Developers say the restriction is broad enough to catch non-malicious reverse-engineering and routine problem-solving. Only a headline-level summary was available, so the effective date and Anthropic's own wording are unconfirmed.
Sources & depth
GPT-5.6 Sol finishes a peaceful-mode Factorio run
GPT-5.6 Sol, running in Codex at a low thinking level, completed a peaceful Factorio game (no enemies) in 13.5 hours of game time, using a Python library that enforced the same limits as the GUI, such as reach and fog of war. It launched a rocket, but the author says manual effort covered up failures to connect some late-game production systems. Still an improvement on GPT-5.5, which never used transport belts. A single self-published run, not a benchmark.
Sources & depth