OpenAI Patches “ShadowLeak,” a Zero-Click Flaw in Deep Research Agent
OpenAI has patched a critical vulnerability known as ShadowLeak, which allowed its cloud-based agent Deep Research to silently siphon personal data from connected sources and exfiltrate it to external servers—even without the victim opening...