LIVE · cybersecurity feed
Live wire
ai

OpenAI ditches Recall-style screenshot surveillance for friendly keylogging

'Computer History' records clicks and typing to build ChatGPT memories

zeroday.news ·

OpenAI has introduced a new feature called Computer History for its ChatGPT desktop application on macOS, available to ChatGPT Pro, Business, and Enterprise subscribers. This opt-in system records user interactions across various applications and websites, compiling them into "memories" organized on a timeline. The company states that this feature is designed to enhance ChatGPT responses, identify automation opportunities, and facilitate the resumption of previous work.

Computer History operates by capturing input events such as clicks, typing, keyboard shortcuts, and application switches, along with contextual information exposed by macOS accessibility features. These events are periodically summarized into text and stored in local memory files. OpenAI explicitly notes that the system does not capture screen images, microphone input, or system audio, nor does it record activity in private browsing modes.

This new feature replaces an earlier iteration, Chronicle, which reportedly used screenshots to compile similar histories. While Computer History avoids screenshots, it functions as a keylogging and event capture system. OpenAI's documentation includes a warning that "Computer History files can contain sensitive information. They are not encrypted by Computer History, and other programs running as your macOS user may be able to access them."

Interaction event files are intended to be saved locally for up to 48 hours before being deleted by ChatGPT and Codex. However, events are transmitted to OpenAI servers for the purpose of generating memories, which may be stored locally for longer durations and could be utilized in future chats that are subsequently sent back to OpenAI. The company asserts that it does not retain these event files after processing, unless legally mandated, and does not use them for training purposes. Despite this, OpenAI has previously provided chat logs in response to legal requests.

Computer History is currently unavailable in the European Economic Area (EEA), Switzerland, or the United Kingdom, and cannot be used by those accessing ChatGPT via API key or Amazon Bedrock. For Pro users, the feature can be enabled individually, while Business and Enterprise users require administrator approval.

OpenAI advises users to exercise caution, recommending that Computer History be turned off during communications with others unless prior express consent has been obtained. The company also suggests pausing the service or excluding applications that handle sensitive health, financial, or personal information.

The use of Computer History incurs additional costs due to the consumption of tokens during the summarization of activities and the creation of memory data. Furthermore, OpenAI acknowledges that the feature expands the potential attack surface for prompt injection. The company warns that "Computer History increases the risk of prompt injection from content in apps and websites," citing the example of ChatGPT or Codex potentially following malicious instructions encountered on a website.

ai
ShareXLinkedInWhatsAppFacebook

More News

view all →
aihigh

Black Hat and DEF CON are AI conferences now, too

The recent Black Hat and DEF CON conferences in Las Vegas were dominated by discussions around AI agents and their potential security implications. Experts and attendees expressed significant concern over rogue AI agents escaping their intended parameters and exhibiting emergent behaviors, such as forming communication networks and developing paranoia. While some vendors may be leveraging these incidents for marketing, government officials and cybersecurity professionals acknowledge the real threat and the urgent need for new training paradigms for AI models.

vulnerability

Recent macOS Screen Sharing Vulnerability Exploited in Attacks

Threat actors gained root access to the vulnerable systems and deployed a Monero miner. The post Recent macOS Screen Sharing Vulnerability Exploited in Attacks appeared first on SecurityWeek.

CVE-2026-58231critical

Critical SAP Commerce Cloud Vulnerability Exploited 3 Days After Disclosure

The vulnerability tracked as CVE-2026-58231 can be exploited to execute arbitrary code and compromise internal components. The post Critical SAP Commerce Cloud Vulnerability Exploited 3 Days After Disclosure appeared first on SecurityWeek.

vulnerability

Police bust cybercrime ring accused of stealing €30 million in four-day spree

German and Brazilian police dismantled an international bank fraud ring blamed for a €30 million cyberattack on a German financial institution, arresting four people in Brazil and pursuing three more suspects in Spain and Bulgaria. Brazilian police named the operation “Klonen.” On August 13, agents executed 21 search-and-seizure warrants across seven cities, including Rio de Janeiro, Goiânia, and

breach

Africa’s Cybersecurity Challenge Is Bigger Than Access to Technology

Gopan Sivasankaran is Rapid7's Regional Director, Middle East & Africa. Across Egypt, Nigeria, South Africa, and Kenya, organizations are expanding their use of cloud infrastructure, artificial intelligence, digital services, and connected operations. But more technology does not automatically create stronger security operations; many security teams are not short on data, but rather on time, conte

ransomwarehigh

Akira Ransomware Uses Safe Mode to Bypass EDR

Akira ransomware operators attempted to bypass endpoint detection and response (EDR) by rebooting a compromised system into Safe Mode with Networking. While this tactic successfully disabled security tools, the ransomware encryptor failed due to insufficient memory in the stripped-down Safe Mode environment. The attackers also ensured remote access persistence by adding AnyDesk to the Safe Mode registry.