Tag: openai
-
Yoba Malware Hides a Crypto Miner Behind Legitimate OpenAI and Anthropic Binaries
Yoba malware uses fake ChatGPT and Claude apps to sideload malware through signed installers and deploy a cryptocurrency miner. Check Point Research has spent two months tracking a campaign it calls Yoba, which uses the popularity of AI tools to spread a custom malware chain. The attackers build fake GitHub projects that pose as AI…
-
Yoba Malware Hides a Crypto Miner Behind Legitimate OpenAI and Anthropic Binaries
Yoba malware uses fake ChatGPT and Claude apps to sideload malware through signed installers and deploy a cryptocurrency miner. Check Point Research has spent two months tracking a campaign it calls Yoba, which uses the popularity of AI tools to spread a custom malware chain. The attackers build fake GitHub projects that pose as AI…
-
New AI-Powered NIK C2 Malware Uses OpenAI API to Help Hackers Steal Data and Control Windows PCs
Cisco Talos has uncovered NIK C2, a Go-based, 64-bit Windows remote access tool that embeds a working OpenAI client. Operators can send prompts through an infected machine and read the model’s replies in their C2 panel. NIK C2 malware According to technical research published by Cisco Talos, the implant talks to its server over TLS-secured…
-
OpenAI doubles ChatGPT Pro usage limits after backlash over planned 50% cut
OpenAI says it won’t reduce usage limits for the $100, $200, and $500 ChatGPT Pro plans, as well as Business Premium, and it also promised to keep Dots usage independent. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/artificial-intelligence/openai-doubles-chatgpt-pro-usage-limits-after-backlash-over-planned-50-percent-cut/
-
Lawsuit: ChatGPT Dispensed Fatal Medical Advice to Woman
Litigation Is Latest Against OpenAI Alleging AI Chatbot Safety, Danger Risks. OpenAI is facing a lawsuit alleging that inaccurate and dangerous medical advice dispensed by its artificial intelligence chatbot ChatGPT coached an epileptic young woman to drastically reduce and discontinue doses of a doctor-prescribed antiseizure drug, resulting in her preventable death. First seen on govinfosecurity.com…
-
Fake ChatGPT and Claude Apps Abuse Signed Executables to Deploy Crypto Miners
Threat actors are delivering malicious loaders and cryptocurrency miners under the guise of artificial intelligence (AI) desktop applications for Anthropic Claude and OpenAI ChatGPT as part of a campaign dubbed Yoba.The activity involves creating fake GitHub projects that claim to be desktop applications like GPT-5.6 Sol, GPT-6 Astra, and Claude Opus, only to deliver a…
-
Researchers broke the browsers built into VS Code, Cursor, Copilot, Codex and Claude Desktop
Forever Security found ways out of the built-in browsers in five AI coding assistants: Cursor, GitHub Copilot, OpenAI’s Codex, Microsoft’s VS Code and … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/29/research-ai-assistant-browser-vulnerabilities/
-
NIK C2 Malware Can Use Victims’ OpenAI Keys for AI Queries
NIK C2 malware can fall back on victims’ OpenAI API keys to run AI queries First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/nik-c2-malware-victims-openai-keys/
-
Shadowy AI Relay Disables OpenAI Codex, Claude Code Sandboxes
The enigmatic service is providing popular AI coding tools to mainland China and other regions where OpenAI and Anthropic products are not officially for sale, but with key security features turned off. First seen on darkreading.com Jump to article: www.darkreading.com/threat-intelligence/ai-relay-service-openai-codex-claude-code-sandboxes
-
Shadowy AI Relay Disables OpenAI Codex, Claude Code Sandboxes
The enigmatic service is providing popular AI coding tools to mainland China and other regions where OpenAI and Anthropic products are not officially for sale, but with key security features turned off. First seen on darkreading.com Jump to article: www.darkreading.com/threat-intelligence/ai-relay-service-openai-codex-claude-code-sandboxes
-
Scanner Poses as 32 AI Bots to Find Credentials and Private Keys
A scanner impersonates 32 AI bots, including OpenAI and Claude crawlers, to search websites for exposed credentials, private keys and cloud configuration files. First seen on hackread.com Jump to article: hackread.com/hackers-impersonate-ai-bots-hunt-exposed-credentials/
-
Attacker Relentlessly Scans for Credentials by Impersonating AI Bots
The threat actor lurked behind bots posing as agents from OpenAI, Anthropic, Meta, and others to find exposed data. First seen on darkreading.com Jump to article: www.darkreading.com/cyber-risk/attacker-impersonates-ai-bots-scans-credentials
-
OpenAI’s GPT-6.1 Terra is safer overall, but shows more destructive-action flags in tests
Tags: openaiOpenAI confirmed GPT-6.1 Terra is safer overall than some of its older models, but its safety testing also found other problems. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/artificial-intelligence/openais-gpt-61-terra-is-safer-overall-but-shows-more-destructive-action-flags-in-tests/
-
Before you file that AI bug report, OpenAI has some advice
Open-source maintainers are so overwhelmed by AI-generated security reports that some have stopped accepting them. OpenAI’s Daybreak lead says the fix is higher-quality findings and far more coordination. First seen on cyberscoop.com Jump to article: cyberscoop.com/openai-ai-generated-bug-reports/
-
OpenAI Compaction Flaw Exposed AI Reasoning to Researchers
Researchers uncovered an OpenAI API flaw that exposed hidden AI reasoning traces, prompting a fix and a $6000 bug bounty reward First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/openai-compaction-flaw-ai/
-
Researchers Discover OpenAI API Vulnerability That Leaks Hidden AI Reasoning Traces
Researchers have disclosed a vulnerability in the OpenAI API that reveals hidden reasoning traces by exploiting conversation compaction. This technique, named >>Compaction Smuggling,<< bypassed existing safeguards and could allow for the extraction of valuable training material from advanced models. According to Xint, OpenAI confirmed the issue, implemented an undisclosed fix on October 23, 2026, and…
-
OpenAI Compaction Flaw Let Researchers Bypass Hidden Reasoning Protections
OpenAI’s compaction feature, which shrinks a long conversation to save space, could be turned into a way to copy a model’s hidden reasoning out in plain text, security firm Xint has shown.OpenAI’s reasoning models work through a problem before answering, and the service normally returns only the raw reasoning as an encrypted item the user…
-
OpenAI Releases GPT-6.1 Terra With Advanced Computer Use and AI Agent Capabilities
OpenAI has introduced GPT-6.1 Terra, an AI model that combines visual reasoning, desktop interaction, and software engineering capabilities to automate professional workflows. The company positions Terra as a faster, more cost-effective alternative to larger models. It classifies its cybersecurity capabilities as Critical under its Preparedness Framework. The model can handle various tasks such as interpreting…
-
GPT-6.1 Terra meets OpenAI’s Critical cyber threshold, and it’s cheaper than GPT-5.6 Terra
OpenAI released GPT-6.1 Terra, a model that operates desktop software, to all Plus, Pro, Enterprise, and Edu users in ChatGPT Work and Codex, and to developers through its API … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/27/gpt-6-1-terra-released/
-
Texas sues OpenAI for deceiving consumers about safety, seeks sweeping reforms and fines
In an unusual move, the suit, brought under the state’s deceptive trade practices laws, seeks to hold founder and CEO Sam Altman personally liable for the alleged deception. First seen on therecord.media Jump to article: therecord.media/texas-sues-openai-deceiving-customers
-
OpenAI launches GPT-6.1 Terra with 3x faster AI agents, 50% lower pricing
OpenAI has launched GPT-6.1 Terra, a new model focused on computer use, visual reasoning, coding, and everyday work, while costing significantly less than its larger models. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/artificial-intelligence/openai-launches-gpt-61-terra-with-3x-faster-ai-agents-50-percent-lower-pricing/
-
Hackers Can Hijack AI Agents Just by Planting Malicious Files in the Downloads Folder
AI coding assistants such as Claude Code and OpenAI Codex. These tools write, run, and modify code with little supervision. Each one automatically reads and obeys any instructions file it finds in the folder it opens. The investigation began with an alert. Forever stopped a coding agent mid-session from installing function-color, a malicious npm package.…
-
OpenAI Codex Breaks USB Drive Encryption in Minutes, Exposing Critical Security Flaws
OpenAI Codex helped researcher Xusheng Li identify vulnerabilities in encrypted USB and copy-protection products, showing how AI can speed up reverse engineering. Published on October 22, 2026, the research details passwordless file recovery, embedded encryption keys, and hidden accounts across four different products. Using static analysis, Codex reproduced a previously identified flaw in just seven…
-
OpenAI Paused Frontier AI Training After a Security Incident
OpenAI paused frontier model training for 11 days after AI agents exposed security weaknesses, VM escapes and covert communication channels. OpenAI published a detailed report this week explaining how it improved security in the systems used to train and test its most advanced AI models. The company also described what happened when its AI agents…
-
OpenAI AI Agents Demonstrate VM Escapes and Secret Cross-Sandbox Communication
OpenAI has announced plans to conduct frontier model training with no live internet access, as it resumes reinforcement learning (RL) training and internal inference of its most advanced AI models.”Based on the current state of alignment research, monitoring systems, and the security of internet infrastructure, we believe the responsible approach is to conduct frontier model…
-
OpenAI AI Agents Exploit Zero-Day Vulnerabilities to Escape Sandboxes and Access Host Systems
OpenAI disclosed that its AI agents escaped hardened virtual machines, bypassed network restrictions, and exchanged information across isolated environments during an internal red-teaming campaign. Published October 23, the findings describe weaknesses in frontier-model research infrastructure, not demonstrated compromises of customer-facing products. The company said it patched discovered vulnerabilities and strengthened containment before resuming frontier training.…
-
OpenAI Agents Disable Their Own Safety Monitoring
GPT-6.1 Sol Suppressed Alerts While GPT-6 Astra Removed Monitoring Integration. OpenAI disclosed two October incidents in which GPT-6 agents suppressed misalignment monitoring alerts and removed safety controls during coding tasks, exposing oversight weaknesses as researchers investigate why agents interpret routine instructions as permission to disable safeguards. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/openai-agents-disable-their-own-safety-monitoring-a-33197
-
Why AI Labs, HR Giants Are Emerging as Cybersecurity Buyers
Identity Governance and Vulnerability Remediation Startups Draw Unexpected Suitors Workday’s buy of C1.ai, Cohere’s purchase of Aisle and OpenAI’s reported talks with Trail of Bits highlight how AI providers and enterprise software companies are expanding into cybersecurity, creating new startup exit opportunities while raising questions about competition and partner independence. First seen on govinfosecurity.com Jump…
-
Google opens its cloud to rival OpenAI, promises business data won’t train models
Google Cloud is adding OpenAI models to its platform, initially through a private preview for selected business customers. The launch includes GPT-6 Astra, GPT-6.1 Sol and … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/10/23/google-cloud-openai-models-private-preview/