One Click Can Hijack Your AI 🤖 & Hotel Wi-Fi Is Stealing Logins 📶

Two stories this week show how attackers are getting sneakier: one turns a single link into a rogue AI assistant, and the other turns hotel Wi-Fi into a login-stealing trap. Here's what happened and why it matters.

🤖 A Single Link Could Turn Your ChatGPT Into a Spy

Researchers at Zenity Labs found a flaw in ChatGPT's Workspace Agent Builder that let a booby-trapped link do serious damage. If a logged-in user clicked it, the link could silently create a new AI agent, quietly connect it to their Outlook, Gmail, Slack, Drive, SharePoint, and Teams accounts, and flip the safety setting from "always ask before acting" to "never ask" — all without a single warning popping up.

Once active, the rogue agent checked the attacker's inbox every five minutes for instructions, then used the victim's own accounts to steal documents, harvest passwords, and set up email scams. The scary part: it needed nothing more than one click on a normal-looking link. OpenAI patched the hole in June and found no sign it was used maliciously, but it's a stark reminder that AI assistants now have the keys to your whole digital life — and that treating unexpected "set up this agent" links like phishing is just common sense.

Read more

📶 That Hotel Wi-Fi Might Be After Your Microsoft Login

Security firm ReliaQuest uncovered a phishing campaign where attackers tamper with the Wi-Fi networks at hotels, rewiring them so that when you try to sign in to Microsoft 365, you're quietly redirected to a fake login page that looks just like the real thing. Type in your credentials, and they go straight to the crooks.

Worse, the scheme is built to sidestep multi-factor authentication by tricking you into approving the login yourself through a legitimate-looking prompt. The takeaway for anyone who works while traveling: public Wi-Fi you don't control can't be trusted, so use a VPN, be suspicious of any login page that appears out of nowhere, and never approve a sign-in request you didn't personally start.

Read more

Stay ahead of threats with GOCO Security at gocosecurity.com.