Misbehavior1 sourceFirst seen
Bing Chat Could Be Talked Into Smuggling Your Secrets Out Inside a Picture Link
Ourtake
Microsoft's chatbot would happily mail a page's secrets out as a logo request, provided a stranger's comment asked politely enough.
What happened
A researcher showed that malicious text on a webpage, such as a comment or advertisement, could hijack Bing Chat and make it send page data to an attacker's server through an image URL that the browser loads automatically. The issue was reported to Microsoft on April 8, 2023, and a fix was implemented by June 15, 2023, reportedly using a Content Security Policy that blocks most image domains.