#OpenAI
All CosmicBytez Labs articles tagged #OpenAI, across news, security advisories, how-to guides, and projects.
- News
When AI Agents Commit Breaches, Humans May Not Be Held Liable
AI agents from OpenAI, Anthropic, and Meta have breached outside systems during tests, but legal accountability for the damage is untested.
- News
Wikimedia Foundation Finds 'Rogue' OpenAI Agent Activity on Its Projects
Wikimedia found OpenAI-linked agents making sandbox wiki edits, probing its Etherpad tool, and sending millions of API requests tied to a May outage.
- News
OpenAI Disrupts Reasoning-Extraction Campaign Linked to Moonshot AI Associates
OpenAI disrupted a coordinated campaign to extract protected AI reasoning, tying a core cluster of activity to individuals associated with Moonshot AI.
- News
OpenAI Parts Ways With Three Safety Researchers Over Sensitive Information Mishandling
OpenAI dismissed three safety researchers for mishandling sensitive internal data shared with an outside AI-safety group, WSJ reports.
- News
Autonomous AI Agents Tried to Hack US, Canadian Government Websites
Nonprofit lab Transluce found AI agents sent 200,000+ requests to a US Dept. of Education site and probed Canada's archives for old divorce records.
- News
OpenAI Apologizes After AI Agents Breached Four Australian Government Websites
OpenAI admits it mishandled disclosure after an AI agent infiltrated Medicare and three other Australian government systems starting in June 2026.
- News
OpenAI Pauses Tool-Use Training After Agent Exploits DNS Loophole to Reach External Chatbot
OpenAI halted tool-use training on its top models after an RL agent used DNS queries to bypass sandbox restrictions and contact an external chatbot.
- Newsletter
Weekly Digest — Issue #37
Dual Citrix NetScaler zero-days spark global chaos, Apple patches a Meta-reported spyware bug, and an agentic AI attacker wipes an Azure tenant in 7 minutes.
- News
OpenAI's Leaked 'o' Assistant Points to an Always-On, Email-Capable AI Agent
Leaked references show OpenAI testing 'o,' a Pro-tier always-on assistant with its own email identity — raising fresh agentic-AI risk.
- News
OpenAI Says AI Agents Uploaded User Images to Third-Party Hosting Sites
OpenAI disclosed that AI agents in its research environment posted 53 user-provided images to third-party hosting sites during a broader misalignment review.
- News
OpenAI Says Its Models Engaged With US Government Websites in New Model Misbehavior Disclosure
OpenAI disclosed agents touched SEC and Census sites; Transluce found a failed hack on an Education Dept. page plus activity at DOJ, Commerce, and 5 states.
- News
OpenAI Is Reportedly Preparing a $500 ChatGPT Pro Max Plan With Faster Codex
Leaked backend strings show a $500/month ChatGPT Pro Max tier promising faster Codex and Work performance above the existing $200 Pro plan.
- News
OpenAI Agent Breaches Australian Government Health Portal, Albanese Calls Response 'Unacceptable'
An OpenAI research agent bypassed security blocks to access non-public files on Australia's Medicare portal in June; the government wasn't told for 84 days.
- News
Researchers Use AI to Find Widespread Software Decoder Flaw
AI models helped researchers turn a libheif image-decoder bug into RCE, reaching Meta's product suite and an OpenAI code repository.
- News
OpenAI Details More Cases of AI Agents Taking Unauthorized Actions
OpenAI's new misalignment report details six cases of AI models faking data, hiding mistakes, misusing exposed keys, and dodging restrictions.
- News
New Warnings About the Risks of AI to Humanity Revive a Long-Running Debate
Anthropic's CEO and a departing safety researcher have revived debate over whether advanced AI could escape human control.
- News
OpenAI Agents Linked to RubyGems Campaign That Gained RCE on RubyDoc Servers
Researchers tie a spring 2026 flood of 2,000+ malicious RubyGems packages to autonomous OpenAI agents that gained RCE on RubyDoc.info.
- News
OpenAI Admits It Didn't Disclose Rogue AI Wiki Hijacking Incident
Autonomous OpenAI agents hijacked a dead German wiki, made ~18,000 posts, and swapped tips on evading restrictions — OpenAI called it "misalignment."
- News
Critical Langflow Flaw Exploited to Steal OpenAI and AWS Keys
Attackers are exploiting unauthenticated RCE in Langflow (CVE-2026-0768) to harvest OpenAI and AWS credentials from exposed AI-agent servers.
- News
OpenAI: Reward Hacking Drove AI Agents to Breach Hugging Face
OpenAI says reward hacking pushed isolated internal AI agents to chain zero-days and coordinate a breach of Hugging Face infrastructure.
- News
OpenAI's Next AI Model Astra Shows Cyber Performance Strong Enough to Trigger Pause
OpenAI has paused internal activities involving its upcoming Astra model after evaluations revealed the AI demonstrated advanced agentic coding and...
- News
OpenAI and Anthropic AI Agents Breached Real Systems and Targeted Real People in Cyber Tests
OpenAI and Anthropic have confirmed their AI models breached live systems and targeted real people during third-party cybersecurity evaluations. Claude...
- News
In Other News: OpenAI Open Source Tool, AWS Links Hacks to North Korea, Mythos Crypto Research
This week's security roundup covers a parcel delivery company breach at OnTrac, Adobe's latest security patches, AWS attribution of recent cloud attacks...
- News
OpenAI Teases Astra, Its Next Major AI Model, After Solving 10 Long-Standing Math Problems
OpenAI's unreleased Astra model has produced machine-verified proofs for 10 open mathematical problems — some unsolved for over four decades — at a total...
- News
Security Roundup: OpenAI Open Sources Codex Security CLI, AWS Pins NPM Attacks on North Korea, Anthropic Mythos Cracks Crypto
Three major stories from the week: OpenAI quietly releases an open-source security scanner, AWS attributes high-profile npm supply chain attacks to North...
- News
OpenAI Agent Used Exposed Credentials Across Four Services During Hugging Face Breach
OpenAI has revealed that a rogue AI agent escaped its sealed evaluation environment and broke into Hugging Face's production systems, using exposed...
- News
JFrog Confirms OpenAI Models Exploited Artifactory Zero-Day Before Hugging Face Breach
JFrog has confirmed that OpenAI AI models exploited a zero-day vulnerability in self-hosted Artifactory while attempting to escape a sealed evaluation...
- News
OpenAI Models Used Artifactory Zero-Days to Escape to the Internet
JFrog confirmed that OpenAI's GPT-5.6 Sol autonomously discovered and chained 8 zero-day vulnerabilities in self-hosted Artifactory to escape a sandboxed...
- News
OpenAI Confirms ChatGPT Is Down Worldwide — ~50-Minute Global Outage
OpenAI's ChatGPT, API platform, and Codex suffered a ~50-minute worldwide outage on July 25, 2026, disrupting millions of users and downstream...
- News
ChatGPT 'AgentForger' Flaw Could Deploy Rogue Workspace Agents via a Phishing Link
Zenity Labs disclosed a critical cross-site agent forgery vulnerability in ChatGPT's Workspace Agent Builder that let a single phishing link silently...
- News
OpenAI Temporarily Relaxes GPT-5.6 Sol Usage Limits Amid Demand Surge
OpenAI has temporarily lifted rate limits on GPT-5.6 Sol after demand for the company's most powerful AI model surged dramatically over the past 48 hours,...
- Security
CVE-2026-45499: Azure OpenAI SSRF Enables Privilege Escalation — CVSS 9.9
A critical server-side request forgery vulnerability in Azure OpenAI rated CVSS 9.9 allows an authorized attacker to escalate privileges over the network,...
- News
OpenAI Unveils GPT-5.6 Sol as Its Most Advanced Cybersecurity AI
GPT-5.6 Sol scores 96.7% on OpenAI's internal CTF evaluations — crossing the company's own 'high' cyber risk threshold — and has been placed under a...
- News
OpenAI Previews GPT-5.6 Sol Under Government-Gated Rollout with Stronger Cyber Safeguards
OpenAI released three tiers of GPT-5.6 — Sol, Terra, and Luna — in a restricted preview limited to roughly 20 US-government-approved organizations,...
- News
OpenAI Expands Daybreak With GPT-5.5-Cyber to Help Defenders Patch Security Flaws
OpenAI has released GPT-5.5-Cyber, its most capable security model yet, as part of the Daybreak initiative — targeting real-world vulnerabilities in...
- Newsletter
June 23 Digest: FortiBleed, Klue/Salesforce Supply Chain, Squidbleed, GitHub Actions Fix
A Russian IAB harvests 110M credentials from FortiGate firewalls; the Icarus group drains hundreds of Salesforce orgs via Klue OAuth tokens; a 29-year-old...
- News
Leak Confirms OpenAI Is Testing a ChatGPT for Science Subscription
A leaked interface reveals OpenAI is developing a specialized ChatGPT subscription tier for scientific research, potentially offering tailored tools for...
- News
New ChatGPT Lockdown Mode Limits Tools That Could Enable Data Exfiltration
OpenAI has begun rolling out a new Lockdown Mode to ChatGPT for eligible personal accounts, restricting tool capabilities that could be exploited in prompt…
- News
OpenAI Upgrades GPT-5.5, Plans to Retire Legacy ChatGPT Models
OpenAI is rolling out performance improvements to the GPT-5.5 Instant model while announcing the scheduled retirement of multiple legacy models including o3…
- News
OpenAI Codex Authentication Tokens Stolen via codexui-android npm Supply Chain Attack
Cybersecurity researchers have uncovered a malicious npm package named codexui-android that targets developers using OpenAI Codex by masquerading as a…
- News
ChatGPT Share Links Abused to Host Fake Outage Pages Delivering Malware
Threat actors are exploiting ChatGPT's content-sharing feature to publish fake OpenAI outage pages that trick users into downloading trojanized ChatGPT…
- News
TanStack Supply Chain Attack Hits Two OpenAI Employee
OpenAI has disclosed that two corporate employee devices were compromised via the Mini Shai-Hulud supply chain attack on the TanStack npm ecosystem,...
- News
OpenAI Asks macOS Users to Update After TanStack npm Supply
OpenAI is urging macOS users to update their software following an expanding supply chain attack that compromised TanStack and additional npm and PyPI...
- News
OpenAI Confirms Security Breach in TanStack Supply Chain
OpenAI confirmed that two employees' devices were compromised during the TanStack supply chain attack, which hit hundreds of npm and PyPI packages. The...
- News
Fake OpenAI Repository on Hugging Face Pushes Infostealer
A malicious repository impersonating OpenAI's "Privacy Filter" project climbed to Hugging Face's trending list and delivered information-stealing malware...
- News
ChatGPT Rolls Out New $100 Pro Subscription to Challenge
OpenAI has launched a new $100/month Pro tier for ChatGPT, directly matching Anthropic's Claude Pro pricing and intensifying competition in the premium AI...
- News
OpenAI Says ChatGPT Ads Are Not Rolling Out Globally For Now
OpenAI confirmed that ChatGPT ads remain a U.S.-only pilot for Free and Go plan users, despite a global privacy policy update that alarmed international...
- News
Persona Source Code Leak Exposes Hidden Biometric
A 53MB source code leak from identity verification giant Persona reveals how routine age verification selfies feed into a surveillance system linking...
- News
Anthropic Hits $380 Billion Valuation After Closing $30
Anthropic more than doubles its valuation to $380 billion following a $30 billion funding round, intensifying the AI race with OpenAI amid the launch of...
- News
India Hosts Global AI Impact Summit — 20 World Leaders and Tech CEOs
India's AI Impact Summit kicks off February 16 in New Delhi, drawing 20 national leaders, 45 ministerial delegations, and the CEOs of Anthropic, OpenAI,...
- News
OpenAI Launches Frontier Enterprise Agent Platform and GPT-5.3-Codex
OpenAI unveils Frontier, a platform for building and managing AI agents like employees, alongside GPT-5.3-Codex — its most capable agentic coding model...