One ChatGPT Link Could Take Over Your Account: Inside the P1 Exploit Chain — and the VOLTA Malware That Uses AI to Price Its Victims
Security firm Parameter.ai disclosed a P1 ChatGPT account-takeover vulnerability: a crafted shared-conversation link bypassed the sandbox and CSP to run arbitrary JavaScript inside the victim’s signed-in session, reading private chats and exfiltrating data. OpenAI has patched it. The same week, Cisco Talos detailed the VOLTA infostealer, which uses LLMs to rank victims by monetization value — AI security is under attack from both sides.





