Desk 02

Bug Bounty

Vulnerability-reward programs, researcher payouts, and the triage that makes them real.

A shared ChatGPT link could act as the person who opened it

Parameter showed a share link that ran code in a signed-in ChatGPT session and could read private chats. OpenAI fixed it in eight days and paid $5,000. The change is on the service.

ZeroDay Times DeskOctober 31, 20263 min read

Bug Bounty

A six-figure bounty is a procurement decision, not a gift

Public reward programs pay for impact at a trust boundary. The triage around the report matters more than the size of the check.

ZeroDay Times DeskOctober 26, 20265 min read