ChatGPhish vulnerability turns ChatGPT web summaries into a phishing surface

Cybersecurity researchers disclosed details of a vulnerability in ChatGPT, called ChatGPhish. It exploits the assistant’s implicit trust in Markdown links and images when summarizing web pages to display phishing links, spoofed security alerts, and QR codes inside ChatGPT’s trusted user interface.