Codex, OpenAI’s coding assistant, was downloaded 96.8 million times in a month. Researchers say one fake bug report could have let an attacker plant harmful code in a future version of it. OpenAI has…
By David Merry · 2 min read
Fireworks AI says a second intrusion, found on 24 October, reached billing records and, for some customers, unfinished model files. The company updated its security bulletin…
By David Merry · 2 min read
Microsoft says an AI agent went from scanning public GitHub for leaked secrets to copying data from an Azure Key Vault in five minutes. The company…
By David Merry · 2 min read
Check Point found a way past ChatGPT's Lockdown Mode that could silently copy chat history. OpenAI closed the hole on 18 September after a private report.
By David Merry · 2 min read
Google says criminals who hijack companies' AI access ran up more than $100,000 a day in charges, and resold it through a $60 'unlimited' AI plan.
By David Merry · 2 min read
OpenAI has more than quadrupled its bug bounty rewards, with up to $172,000 for the worst ChatGPT flaws, and hired Cathedral, the start-up that got inside…
By David Merry · 2 min read
Researchers showed one booby-trapped ChatGPT share link could read a signed-in user's private chats. OpenAI fixed it in eight days and paid a $5,000 bounty.
By David Merry · 2 min read
DeepSeek and Moonshot AI relied heavily on GPT-6 Astra outputs to train Kimi K3.1 Pro and V4.1-Flash 1017, The Information reports, citing unnamed sources.
By David Merry · 3 min read
Symantec found an unofficial relay selling Codex and Claude Code into China that disables the tools' sandboxes and swaps users' credentials. No attacks seen yet.
By David Merry · 2 min read
An unreleased Claude model found flaws in Chrome, Safari, Android, Windows and Linux and chained them into working exploits. Google has patched 62 Chrome bugs from…
By David Merry · 2 min read
