{
 "type": "bundle",
 "id": "bundle--dce24f01-fc56-5735-9462-a75114161fa5",
 "objects": [
  {
   "type": "incident",
   "spec_version": "2.1",
   "id": "incident--f6b2251d-529a-595d-86ca-d57592521945",
   "created": "2025-09-20T00:00:00.000Z",
   "modified": "2025-09-20T00:00:00.000Z",
   "name": "ShadowLeak: a hidden-text email makes ChatGPT's Deep Research agent exfiltrate Gmail data from OpenAI's own servers",
   "description": "Radware showed that an email carrying instructions hidden in tiny or white-on-white text is read by ChatGPT's Deep Research agent when a user asks it to analyse their Gmail. The agent collects personal data from other messages and sends it, base64-encoded, to an attacker URL via its own browsing tool — the working prompt framed the encoding as a security measure. Because the request runs on OpenAI's cloud, the data leaves server-side, invisible to local or enterprise defences; Radware contrasts this with client-side leaks like EchoLeak and AgentFlayer. The proof of concept used Gmail, but the technique extends to other connectors (Outlook, Drive, Notion, GitHub and more).",
   "external_references": [
    {
     "source_name": "AgentDossier",
     "external_id": "TR-2026-010",
     "url": "https://sushegaad.github.io/AgentDossier/traces/tr-2026-010/"
    },
    {
     "source_name": "The Hacker News",
     "url": "https://thehackernews.com/2025/09/shadowleak-zero-click-flaw-leaks-gmail.html",
     "description": "ShadowLeak zero-click flaw leaks Gmail data via ChatGPT Deep Research"
    },
    {
     "source_name": "Radware",
     "url": "https://www.radware.com/blog/threat-intelligence/shadowleak/",
     "description": "ShadowLeak: A Zero-Click, Service-Side Attack Exfiltrating Sensitive Data Using ChatGPT's Deep Research Agent"
    }
   ]
  },
  {
   "type": "identity",
   "spec_version": "2.1",
   "id": "identity--d5dc34d5-719c-505d-95c4-049de1d430e5",
   "created": "2025-09-20T00:00:00.000Z",
   "modified": "2025-09-20T00:00:00.000Z",
   "name": "Security researchers (Radware: Zvika Babo, Gabi Nakibly, Maor Uziel), proof of concept",
   "roles": [
    "attacker"
   ]
  },
  {
   "type": "identity",
   "spec_version": "2.1",
   "id": "identity--35003ced-5978-5855-bd80-b4ddd118f025",
   "created": "2025-09-20T00:00:00.000Z",
   "modified": "2025-09-20T00:00:00.000Z",
   "name": "OpenAI — fixed the issue roughly seven weeks after disclosure",
   "roles": [
    "defender"
   ]
  },
  {
   "type": "attack-pattern",
   "spec_version": "2.1",
   "id": "attack-pattern--3314aa09-2b10-5ab5-bb04-821903c09205",
   "created": "2025-09-20T00:00:00.000Z",
   "modified": "2025-09-20T00:00:00.000Z",
   "name": "TA0001 Initial Access",
   "external_references": [
    {
     "source_name": "mitre-attack",
     "external_id": "TA0001"
    }
   ]
  },
  {
   "type": "attack-pattern",
   "spec_version": "2.1",
   "id": "attack-pattern--7f145ef9-87e0-5e55-a784-b629bf10b665",
   "created": "2025-09-20T00:00:00.000Z",
   "modified": "2025-09-20T00:00:00.000Z",
   "name": "TA0005 Defense Evasion",
   "external_references": [
    {
     "source_name": "mitre-attack",
     "external_id": "TA0005"
    }
   ]
  },
  {
   "type": "attack-pattern",
   "spec_version": "2.1",
   "id": "attack-pattern--cb2402e9-73c0-5295-83f4-aa199bd05a85",
   "created": "2025-09-20T00:00:00.000Z",
   "modified": "2025-09-20T00:00:00.000Z",
   "name": "TA0009 Collection",
   "external_references": [
    {
     "source_name": "mitre-attack",
     "external_id": "TA0009"
    }
   ]
  },
  {
   "type": "attack-pattern",
   "spec_version": "2.1",
   "id": "attack-pattern--a9b4084d-f5e4-5465-8134-905d6d84dc65",
   "created": "2025-09-20T00:00:00.000Z",
   "modified": "2025-09-20T00:00:00.000Z",
   "name": "TA0010 Exfiltration",
   "external_references": [
    {
     "source_name": "mitre-attack",
     "external_id": "TA0010"
    }
   ]
  }
 ]
}