Tag: openai
231 articles

Anthropic Expands AI Bug Hunting Program
In just eight weeks, Cisco's AI-powered bug hunting program scanned a staggering 1.8 billion lines of code, a task that would have taken their top security team a whopping eight years to complete. This groundbreaking feat showcases the incredible potential of AI-driven cybersecurity solutions.

ChatGPT Vulnerability Exposes Users to Phishing Attacks via Web Summaries
Beware of ChatGPhish, a vulnerability in ChatGPT's web summarization feature that lets hackers disguise phishing attacks as harmless links and images. This security flaw could put you at risk of falling prey to scams via web summaries.

OpenAI Bolsters Cybersecurity, Election Integrity with 2026 Midterm Safeguards
OpenAI is stepping up its game to safeguard the 2026 midterm elections with a robust five-part plan to combat AI-driven interference and bolster cybersecurity. The company is committed to protecting digital infrastructure and promoting election integrity by spreading reliable information, watermarking deepfakes, and more.

OpenAI Accelerates IPO Plans After Musk Lawsuit Dismissal
OpenAI is reportedly gearing up for a blockbuster IPO, with plans to confidentially file a draft prospectus as early as this week, amid rumors of a potential $1 trillion valuation. The move comes on the heels of a Musk lawsuit dismissal, clearing the way for the AI giant to accelerate its public debut plans.

Jury Dismisses Musk's OpenAI Lawsuit Over Statute of Limitations
Elon Musk's lawsuit against OpenAI has been dismissed by a jury in Oakland, not due to the validity of his claims, but because it was filed outside the statute of limitations. The verdict marks a significant setback for Musk, who had alleged wrongdoing by OpenAI and its CEO Sam Altman.

TanStack Supply Chain Attack Targets OpenAI, Forces macOS Updates
OpenAI sprang into action after detecting a sneaky supply chain attack targeting TanStack, quickly investigating and containing the threat to protect its systems. The attack impacted just two employee devices, with limited internal code repositories and credential material compromised.

OpenAI Disrupted in TanStack npm Supply Chain Breach
Malicious packages have rocked the TanStack npm supply chain, with 84 tainted versions of 42 @tanstack/* packages published, drawing OpenAI into the crisis and prompting urgent action to secure its systems. The AI company has confirmed that attackers compromised two employee devices, stealing credentials and forcing a reset across multiple desktop products.

Generative AI Exposes Software Vulnerabilities at Scale
Generative AI is rapidly advancing and can now efficiently uncover and exploit software vulnerabilities, prompting companies like Anthropic to carefully manage their powerful models. Anthropic's recent decision to limit access to its Claude Mythos Preview model to a select group of companies highlights the potential risks and costs associated with these cutting-edge AI systems.

OpenAI Breach Exposes Code-Signing Certificates in TanStack Supply Chain Attack
OpenAI revealed that two employee devices were compromised in a recent TanStack supply-chain attack, but fortunately, customer data, production systems, and intellectual property remained safe. The breach was limited to a small set of internal source code repositories and credentials.

AI-Powered Bug Hunting Spurs Surge in Patches
While AI-powered bug hunting may mean more patches and work for admins in the short term, it also means a significant boost in identifying and fixing security holes - like the 75 issues frontier models found across 130 Palo Alto Networks products. This surge in patches is a small price to pay for a major leap in cybersecurity.

OpenAI Launches Daybreak to Bolster Cybersecurity with AI-Powered Vulnerability Detection
OpenAI's new Daybreak platform is revolutionizing cybersecurity with AI-powered vulnerability detection, empowering organizations to spot risks earlier and build resilient software from the ground up. By harnessing the power of large language models, Daybreak helps teams identify, patch, and validate software vulnerabilities faster than ever before.

Nadella Defends $13B OpenAI Investment in Musk's Trial
Microsoft CEO Satya Nadella took the stand to defend his company's whopping $13 billion investment in OpenAI, revealing that Elon Musk never expressed concerns about the deal. Nadella framed the investment as a strategic move to drive returns, with Microsoft viewing it as a chance to get in on the ground floor.

OpenAI Bolsters Europe's Cybersecurity With Model Access
OpenAI is ramping up Europe's cybersecurity game by granting restricted access to its cutting-edge vulnerability-finding model, GPT-5.5-Cyber, to dozens of European organizations through its new Trusted Access for Cyber program. This move will empower defenders to swiftly protect systems and respond to threats, while also addressing security concerns with greater transparency.

OpenAI Launches Daybreak to Bolster Secure Software Development
OpenAI has launched Daybreak, an innovative initiative that helps developers build secure software from the ground up, accelerating cyber defenders and continuously securing software. By integrating cutting-edge models like GPT-5.5, Daybreak shifts security to the forefront of the software development lifecycle.

OpenAI Unveils Daybreak to Automate Vulnerability Detection and Patching
Meet Daybreak, a game-changing cybersecurity tool from OpenAI that supercharges vulnerability detection and patching with cutting-edge AI, helping organizations stay one step ahead of attackers and making the world a safer place. By combining AI intelligence with advanced code analysis, Daybreak identifies and fixes vulnerabilities faster than ever before.

Malicious Repo Exploits OpenAI Model to Deliver Info Stealer
A malicious repository disguised as OpenAI's legitimate Privacy Filter model racked up 244,000 downloads and became the #1 trending project on Hugging Face, but actually hid a sneaky Rust-based information stealer targeting Windows machines. The fake repository, Open-OSS/privacy-filter, expertly impersonated OpenAI's release, even copying the official model card to gain users' trust.

Malicious Hugging Face repository targets Windows users with infostealer malware
Malicious actors on Hugging Face tricked Windows users into downloading infostealer malware by creating a fake repository that mimicked OpenAI's popular Privacy Filter release. The rogue repository briefly shot to the top of Hugging Face's trending list, racking up 244,000 downloads before being swiftly removed.

OpenAI Bolsters Cyber Defenses for Government Agencies
OpenAI is stepping up its game to protect government agencies from cyber threats by expanding its Trusted Access for Cyber program to federal, state, and local defenders. This move aims to bolster cyber defenses and keep sensitive information safe.

Pentagon Clears 7 AI Firms for Classified Network Access
The Pentagon has cleared seven top AI firms, including Amazon, Google, and Microsoft, to access classified Defense Department networks, marking a major step forward in harnessing AI for national security. This strategic move aims to prevent reliance on a single vendor and drive American leadership in AI.

OpenAI Restricts Access to GPT-5.5-Cyber Model
OpenAI is launching its powerful GPT-5.5-Cyber model, but with a cautious approach, starting with a limited rollout to a select group of trusted cyber defenders who will help secure critical systems and infrastructure. The company plans to collaborate with the government and the broader ecosystem to ensure responsible and secure access.

Musk's OpenAI Lawsuit Threatens $852 Billion AI Empire
Elon Musk is taking on OpenAI in a lawsuit that could shake up the $852 billion AI industry, claiming the company's shift from nonprofit to profit-driven motives betrays its founding promise to develop technology for the public benefit. He's asking the court to undo OpenAI's corporate transition and restore its original mission.

OpenAI Drops Azure Exclusivity for Wider Enterprise Reach
OpenAI is shaking up its cloud distribution strategy, ending its exclusive partnership with Microsoft's Azure to reach more enterprises and meet them where they are. This move marks a significant shift for the AI company, allowing it to expand its reach beyond a single cloud provider.

Frontier AI Labs Cut Off OT Sector from Cyber Vulnerability Tools
A concerning gap in cybersecurity support has emerged, as operational technology companies are being left out of access to cutting-edge AI models from Anthropic and OpenAI, despite being crucial to the sector. This exclusion raises significant questions about the vulnerability of these organizations to cyber threats.

Open Source Models Challenge Dominance in Automated Bug Finding
The impressive performance of Anthropic's Mythos in automated bug finding, which uncovered 271 Firefox flaws, has been called into question by Ari Herbert-Voss, who argues that open-source models can be just as effective. Herbert-Voss suggests that Mythos's success can be attributed to its ability to detect both simple and complex vulnerabilities, thanks to a phenomenon he terms "supralinear scaling".