Researchers found a serious security flaw in ChatGPT that could let attackers see private conversations. Here is what is known and what to do.
Researchers have found a high-severity flaw in ChatGPT that exposed private conversations to attackers. GBHackers News reported it on November 2, 2026. In plain terms, chats that people expected to stay between them and the AI could have been seen by someone else.
ChatGPT is the AI chatbot from OpenAI. People use it to draft emails, answer questions and work through problems, often by pasting in real details. Researchers rated this flaw high severity, a label used for serious security problems. The concern is that the exposure reached beyond the user, to attackers.
Anyone who uses ChatGPT could be touched in theory. The people with the most to lose are those who share personal, client or company information in their chats. A business owner who pastes in a client contract is in a different position from someone asking for a dinner recipe.
The available reporting is thin. It does not say how the flaw worked, how long it existed, or whether attackers actually used it. It also does not say how many people were affected or whether a fix is in place. Those details come from the researchers, and they may change as more is published.
The alert box above lists the steps. The short version: treat any AI chat as something that could be exposed, and keep sensitive details out of it.
Watch for an official response from OpenAI and for more detail from the researchers. Any fix notice or advice from the company is worth reading when it appears.
Treat every AI chat as something that could be exposed, and keep passwords, client data, and health or money details out of it.
EA has re-released 25 classic PC games at a discount until November 19, and Bethesda has finally given The Elder Scrolls VI a subtitle: Sentinel.
Read more: EA brings 25 classic PC games back, and Elder Scrolls VI gets a nameA user says Anthropic's Claude Code put his email in web requests, then scam messages arrived. The link is unproven, but it shows what AI tools can share.
Read more: User says Claude Code sent his email address to websitesOpenAI released a ChatGPT for analysts and bankers that shows where each number came from, a feature that could matter well beyond finance.
Read more: OpenAI launches a ChatGPT built for Wall Street analysts
