Sep. 18 at 4:03 PM
$RDWR New ShadowLeak exploit directs ChatGPT’s Deep Research agent to exfiltrate sensitive customer data autonomously, from OpenAI servers
September 18, 2025 10:30 ET | Source: Radware Ltd.Follow
MAHWAH, N.J., Sept. 18, 2025 (GLOBE NEWSWIRE) -- Radware® (NASDAQ: RDWR), a leading provider of cybersecurity and application delivery solutions, today announced the discovery of a previously unknown zero-click vulnerability affecting the ChatGPT Deep Research agent. The flaw, dubbed “ShadowLeak,” allows attackers to exfiltrate sensitive information from users without any clicks, prompts or visible signs of compromise on the network or endpoint.