THREAT OPS › Threat News › When AI Assistant Share Links Become Public Exposure
When AI Assistant Share Links Become Public Exposure
<p>Every major AI assistant likely includes a "Share" button. The mental model users hold is a private hand-off, like a link you paste to a colleague. However, the mental model the web holds differs and is worth exploring.</p> <h2>Why AI assistant share links are risky</h2> <p>A share link is an unauthenticated, permanent, crawlable HTTP resource sitting on a high-authority domain. The only
MITRE ATT&CK techniques
- Search EnginesT1593.002
Indicators of compromise
- https://chatgpt.com/share/*url
- https://chat.openai.com/share/*url
- https://g.co/gemini/share/* isurl
- track.hubspot.comdomain
- 2fwww.varonis.comdomain
- 252fwww.varonis.comdomain
Original source: https://www.varonis.com/blog/ai-share-links