Parameter

Security builds trust. Strengthen both, all on one platform.

Backed by @ycombinator W26

[International Cyber Digest @IntCyberDigest]

‼️ A single shared ChatGPT link was enough to take over the account of anyone who opened it, security firm Parameter says.

Its test code opened a private chat that was never shared and sent part of it to the researchers.

OpenAI fixed it in 8 days and paid $5,000.

[Parameter @parameter_ai]

@TheHackersNews 🫣

[The Hacker News @TheHackersNews]

🚨 OpenAI fixed a ChatGPT flaw that allowed malicious shared links to execute attacker code in users' logged-in sessions and steal private chat content.

Researchers demonstrated the attack.

Here's how → https://t.co/zGsgFPV0Pq

[Parameter @parameter_ai]

Full writeup with code: https://t.co/RHNtQNj4Ca

[Parameter @parameter_ai]

We hacked ChatGPT (using ChatGPT).

We demonstrated that a single shared link could take over the account of anyone who opened it: private chats, files, settings, all of it.

OpenAI rated it P1 and fixed it Oct 26.

[Parameter @parameter_ai]

@ehsayaan

[Parameter @parameter_ai]

https://t.co/NW9bw4xjZ4

[Parameter @parameter_ai]

Introducing Windows application pentesting.

Our AI agent can now test your app the way an attacker would: local storage, network traffic, and access controls.

[Parameter @parameter_ai]

https://t.co/kb9kZyu1Vy

[Parameter @parameter_ai]

Introducing Watchtower, our take on external attack surface management.

Give it a domain and watchtower maps your internet-facing assets, shows where they’re hosted, and tracks what’s new, changed, or gone.

[Prama Yudhistira @menace_codes]

we at parameter are growing fast ASF and we need a really cracked eng whom are all of the following:

* smarter than me
* knows more shit than me
* doesn't write AI slop

we are going to pay you good 🤤 and you can potentially make generational wealth.

[Perly 🦈 @_Shark_byte]

I’m hosting a CTF🥳🥳🥳

This October shark byte labs will be haunting its first ever CTF (ahhh I can’t believe it’s happening yall)

When: October 25th
Where: Virtual

It’s beginner to advanced friendly AND we’ll be having workshops throughout the day so you can level up WHILE you level up

(Okay I apologize for the bad joke lol)

There’s gonna be crazy challenges and amazing prizes so make sure to RSVP as soon as possible to save your spot :)

🔗 in the comments!

Wanna sponsor? Speak? Get involved? Shoot me a dm or comment here! We’d love to make some room for you :D

@SkillBitLabs @cotoolai @parameter_ai @maxpollard415 @kennetheversole @OpsCompanion @depthfirstlabs @francescpicc @hackinghub_io

[Huzaifa @hzzzaifa]

Hiring founding designers! Would love to connect w/ cracked designers / design engineers

SF, 140k, equity

[Parameter @parameter_ai]

We’re bringing Parameter to GISEC GLOBAL in Dubai, 16-18 September.

Our first show in the region. Come see what continuous autonomous pentesting looks like.

📍 Booth SP60, Startup Zone, Hall 1

Security leaders in the region, come say hi!

[Parameter @parameter_ai]

https://t.co/RY52aQIMOZ

[Parameter @parameter_ai]

Introducing Pentesting for Android.

As companies expand their digital footprint, their attack surface grows too. Native mobile apps are often overlooked in security testing, leaving vulnerabilities undiscovered.

If you're building an Android app, we'd love to show you what we can do.

[Parameter @parameter_ai]

@menace_codes - Built by the best hackers.

[Parameter @parameter_ai]

@abiryanii 🥹

[Parameter @parameter_ai]

@hzzzaifa 👨‍🍳

[Parameter @parameter_ai]

Find out more at https://t.co/DQOVv78BMa

[Parameter @parameter_ai]

Introducing Parameter v1.6.

A refined interface, a more powerful pentesting harness, expanded PR security review, and pentesting for Android, iOS, and watchOS.

Here’s what’s new ↓

[Parameter @parameter_ai]

3/ Expanded platform coverage

Parameter now supports pentesting for Android, iOS, and watchOS.