CriticalCloud and identityOct 31, 2026

ChatGPT Shared Link Flaw Allowed Attackers to Steal Private Chat History

Security researchers discovered a flaw in ChatGPT where opening a malicious shared link could execute attacker code directly inside a user's active session. This vulnerability allowed attackers to access and read private conversation histories belonging to anyone who opened the link. OpenAI resolved the issue within eight days, but the incident highlights significant privacy risks when employees use web-based AI tools for work.

Cloud and identity security briefing

Who is affected

Organizations whose employees use ChatGPT and open shared links from external or unverified sources.

How to mitigate it

  1. 1Instruct employees to avoid clicking ChatGPT share links received from unknown or untrusted senders.
  2. 2Define clear corporate policies restricting the entry of proprietary, client, or sensitive business data into public AI platforms.
  3. 3Implement endpoint web filtering and email security solutions to inspect and block suspicious links before users open them.
  4. 4Review active cloud application permissions and encourage staff to sign out of sensitive web sessions when they are not in use.

How Outsource IT solves this

Our employee security training educates your staff on safe AI adoption and phishing defence so they can spot and avoid malicious links before data is compromised.

Employee Security & Software Training

Tags

ChatGPTAI SecurityData PrivacySession Hijacking

Source advisory: the-hacker-news

Not sure whether this affects your business?

Outsource IT has been delivering managed services for over 20 years from Burlington, Ontario, supporting organizations right across Canada. Ask our team to review your exposure.

More security briefings

View the full security feed

Testimonials

Don't just take our word for it.

  • We were introduced to Outsource IT at a time when we were interested in improving our IT infrastructure and associated services. In working with Outsource IT; they have rebuilt our confidence in third party IT administration. As CBM grows, we know we are in good hands as we focus on serving our clients.
    Canadian Business MachinesFull service designer and precision metal fabricator.
  • Over the past 8 years, we have received exceptional service from Outsource IT. Their attention to our needs has been prompt and thorough and we are pleased to have them as our ongoing IT service provider.
    Hamilton Family Health TeamOntario's largest Family Health Team with over 150 doctors
  • Outsource IT has brought critical thinking, support and value to our Organization. Their attention to detail and strategic approach leverages I.T. operations to meet today's industry standards. Being EXCEPTIONAL is exactly what Outsource IT has brought to CICC.
    CICCCollege of Immigration and Citizenship Consultants

Technology partners we build on

Certified expertise across the platforms that run Canadian business, from Microsoft and Cisco to Fortinet, Dell and HPE.

  • Microsoft partner logo
  • Cisco partner logo
  • Fortinet partner logo
  • Barracuda partner logo
  • Dell Technologies partner logo
  • HP partner logo
  • Hewlett Packard Enterprise partner logo
  • Lenovo partner logo
  • VMware partner logo
  • Google partner logo
  • Eaton partner logo
  • 3CX partner logo