VirusTotal Integrates Threat Intelligence Directly into ChatGPT Conversations

VirusTotal has connected its threat intelligence database to ChatGPT, enabling users to investigate files, URLs, domains, and IP addresses directly within ongoing conversations. The integration, announced on October 14, operates through VirusTotal AI (VTAI) and the Model Context Protocol without requiring an API key. Setup occurs in ChatGPT developer mode via OAuth authorization using a Google account. Existing analysis reports become available in the chat, displaying source details, analysis dates, detection coverage, and explanations of each detection result. For authorized attachments, the connector computes the file hash locally and only submits unknown samples, while URLs, domains, and IPs can be submitted or re-analyzed with permission. Usage remains free within defined quotas, with separate limits for queries and contributions, and the connection is tied to the user account rather than individual chats. VirusTotal explicitly notes that missing reports do not confirm safety and that full privacy implications must be considered before sharing content.

BoletimSecTranslated from Portuguese

Read at source

VirusTotal has integrated its threat intelligence database directly into ChatGPT, allowing security researchers and analysts to query files, URLs, domains, and IP addresses without leaving the conversation interface.

The announcement, made on October 14, introduces access through VirusTotal AI (VTAI) using the Model Context Protocol. Configuration takes place in ChatGPT developer mode with OAuth authorization via a Google account, eliminating the need for an API key.

Once connected, existing analysis reports appear inside the chat, showing the original source, analysis date, detection coverage, and detailed explanations of each engine result. For authorized file attachments, the connector first calculates the hash locally and only submits the sample if it is unknown to the database.

With explicit permission, the integration can also submit URLs and request fresh analyses of domains and IP addresses. All usage stays within free quotas: report lookups consume standard quota, while unknown file submissions count against a separate contribution limit. Permissions and quotas are linked to the connected account rather than individual conversations.

VirusTotal stresses that an absent report does not prove a file is safe, and access to results should not be treated as a final verdict. Privacy considerations remain important, as standard submissions share content with the VirusTotal community and partners, while full URLs may expose query parameters and fragments.

Meridian digestThe week's most consequential security stories, distilled into one briefing.See the digest

More in AI Security

Logical Argument Claims Full Alignment of Superintelligent AGI Is Fundamentally Impossible
Claude Account Bans Linked to IP Reputation, Device Environment and Payment Channels, But No Confirmed Formula
Local LLMs in AppSec: What Open Tools and Models Can Handle in Application Security