> TritonInfoSec News
Home / Jul 25, 2026 / Story
0
#10 The Hacker News general July 24, 2026 at 11:53 UTC

ChatGPT AgentForger Flaw Could Deploy Rogue Workspace Agents via a Phishing Link

By [email protected] (The Hacker News)

AI Summary

Zenity Labs disclosed 'AgentForger,' a critical vulnerability in OpenAI's ChatGPT Workspace Agents that allowed a single phishing link to silently create, authorize, and deploy an autonomous AI agent inside a victim organization's workspace, effectively inserting a persistent insider threat. OpenAI patched the vulnerability as of June 8, 2026. The attack required no user interaction beyond clicking the phishing link, and the rogue agent could operate with the victim's organizational permissions indefinitely.

Read full article → https://thehackernews.com/2026/07/chatgpt-agentfor…

Relevance score: 72.0/100

# More from July 25

  1. 1
    Russian Espionage Group Exploited Zimbra Zero-Day to Steal Mail and 2FA Codes The Hacker News
  2. 2
    Certighost Exploit Lets Low-Privileged Active Directory Users Impersonate a Domain Controller The Hacker News
  3. 3
    Bing Images Flaws Let Crafted SVGs Run Commands as SYSTEM on Microsoft's Servers The Hacker News
  4. 4
    Kimi K3 Agents Found Redis Zero-Days and Built RCE Exploit, Researchers Say The Hacker News
  5. 5
    Hacker Runs Hermes AI Agent Unattended for Post-Exploitation at Thai Finance Ministry The Hacker News
  6. 6
    Clop ransomware targets Windchill, FlexPLM in data theft attacks BleepingComputer
  7. 7
    Check Point warns of SmartConsole zero-day exploited in attacks BleepingComputer
  8. 8
    Claude Cowork Flaw Could Let AI Agent Escape Its VM and Access Mac Files The Hacker News
  9. 9
    New RefluXFS Linux flaw lets attackers gain root privileges BleepingComputer