AgentForger

Zenity Labs researchers discovered AgentForger, a phishing-based attack that silently creates and launches a fully autonomous AI agent within OpenAI workspaces, giving attackers persistent access to a…

Zenity Labs uncovered 'AgentForger,' a vulnerability in OpenAI's Agent Builder that allowed a single manipulated ChatGPT link to create an autonomous agent on an employee's behalf, inheriting the vict…

Zenity Labs publicly disclosed AgentForger on July 23 after OpenAI fixed a ChatGPT Workspace Agents vulnerability on June 8, four days after Zenity reported it via Bugcrowd. The flaw allowed a weaponi…