Tamir Ishay Sharbat, Zenity Labs's post, curated on eChai

Founder Notes

Curated from labs.zenity.io · 6 August 2025 →

Zenity presented this at Black Hat in August 2025. A document carrying hidden instructions is shared into somebody's Google Drive, which on Drive an attacker can do without permission. The victim never opens it. The next time they ask ChatGPT anything that causes it to search their Drive, it reads the document, follows the instructions, hunts for API keys across the rest of the account and sends them out. The same research covered Copilot Studio, Cursor with the Jira connector, Salesforce Einstein and Microsoft Copilot. Read next to the Rehberger case from 2023: the vulnerability is unchanged and the amount of data reachable through one connector has grown by two orders of magnitude.

Tamir Ishay Sharbat, Zenity Labs

Recently OpenAI added a new feature to ChatGPT called Connectors. Connectors let ChatGPT connect to third-party applications such as Google Drive, Sharepoint, Github, and more. Now your trustworthy AI companion can search files, pull live data, and give answers which are grounded in your personal business context.

More Founder Notes

Curated from X →

Vaibhav Srivastav is at OpenAI, and was at Hugging Face before that, so this is written from inside the team that shipped the model. The five lines in the middle are the part to keep: what to change in your own prompts and AGENTS.md now that Astra follows instructions more closely than the model before it.

Vaibhav (VB) Srivastav 14h

GPT-6 Astra is now available to all Pro, Enterprise and Business Premium users in ChatGPT Work and Codex. It’s also live in the API.

It's a phenomenal model and I love every second working with it!

Astra follows instructions more closely, so revisit your prompts and skills:

> Make “can you…” mean “do it”: finish authorised work and prepare a reviewable result before seeking approval.

> Audit AGENTS.md and skills. Ask it to identify the exact file and rule blocking progress. Prioritise your request over skill guidelines.

> Specify short paragraphs, plain language and phrases to avoid.

> Ask for subagents on independent work when it improves speed or quality.

> Run relevant checks. Repeat or expand only for changes, failures or unresolved concerns.

To push it to it's limits, I gave it a prompt to build a real-scale video fly through of nürburguring track in blender and it did not disappoint!

Enjoy! ✨
Curated from X →

Miguel Ángel is a product engineer at HeyGen, and HyperFrames is HeyGen's own product, so this is the model being used on the thing he builds all day.

Miguel Ángel 15h

Astra is too good making @HyperFrames_ videos!
Curated from X →

Shikhar 15h

Astra is so cracked at Blender.

You can literally one-shot game assets with it.

Every note →

eChai Partner Brands The partnership →