"But marinade" and leaked passwords are what researchers found in ChatGPT's hidden reasoning

Security researchers found a vulnerability in the APIs of OpenAI, Anthropic, and Google that allows extraction of encrypted reasoning traces and transfer between models, with a scan of public sessions revealing dozens of passwords and API keys. The findings show that reasoning summaries users see often conceal the models' actual operations.