{"id":16063,"date":"2026-11-12T10:15:13","date_gmt":"2026-11-12T09:15:13","guid":{"rendered":"https:\/\/dailyai.com\/?p=16063"},"modified":"2026-11-12T10:17:30","modified_gmt":"2026-11-12T09:17:30","slug":"codex-flaw-put-a-tool-downloaded-97-million-times-a-month-at-risk","status":"publish","type":"post","link":"https:\/\/dailyai.com\/it\/2026\/11\/codex-flaw-put-a-tool-downloaded-97-million-times-a-month-at-risk\/","title":{"rendered":"Una falla in Codex di OpenAI ha messo a rischio 97 milioni di download mensili"},"content":{"rendered":"<p class=\"wp-block-paragraph\"><strong>96,8 milioni. Questo \u00e8 il numero di download della versione a riga di comando di Codex, l'assistente di programmazione di OpenAI, nei 30 giorni precedenti al 10 novembre. I ricercatori di sicurezza affermano che una falsa segnalazione di bug avrebbe potuto consentire a un malintenzionato di inserire codice dannoso in un futuro aggiornamento. OpenAI ha risolto il problema e ha corrisposto ai ricercatori un primo premio di 1.000 dollari.<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">I ricercatori lavorano presso l'azienda di sicurezza Depi. <a href=\"https:\/\/depi.security\/blog\/20261111-backdooring-codex\/\" target=\"_blank\" rel=\"noopener\">L'11 novembre hanno pubblicato ogni fase dell'attacco.<\/a> <a href=\"https:\/\/api.npmjs.org\/downloads\/point\/last-month\/@openai\/codex\" target=\"_blank\" rel=\"noopener\">Il numero di download proviene dalle statistiche pubbliche della libreria software npm.<\/a> Depi afferma che gli utenti di Codex non hanno nulla da correggere.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Come ha funzionato l'attacco<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">OpenAI mantiene il codice sorgente di Codex in un progetto pubblico su GitHub, dove chiunque pu\u00f2 segnalare un bug. Uno strumento di supporto leggeva ogni nuova segnalazione e suggeriva delle etichette. Questo strumento di supporto era l'assistente di Codex stesso, che riceveva il testo della segnalazione mescolato alle proprie istruzioni. In questo modo, chi scriveva poteva nascondere dei comandi all'interno di una segnalazione. Questo trucco \u00e8 chiamato \"iniezione di prompt\".<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Depi afferma di essere riuscita a far eseguire del codice nascosto all'assistente, a uscire dall'ambiente protetto in cui operava e a leggere le chiavi di accesso segrete dalla memoria del computer. Con queste chiavi, ha inserito un file dannoso in una cartella condivisa da processi automatizzati. Un processo pi\u00f9 potente avrebbe poi potuto eseguire quel file. L'ultimo passaggio consisteva in una trappola che avrebbe fornito all'attaccante una chiave accettata dalla libreria npm per la pubblicazione di nuove versioni di Codex.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Cosa ha cambiato OpenAI<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Depi afferma che OpenAI ha implementato immediatamente una soluzione e ha pagato una prima ricompensa di 1.000 dollari, mentre la segnalazione \u00e8 ancora in fase di revisione. Le ricompense pi\u00f9 elevate per i bug pi\u00f9 gravi raggiungono i 100.000 dollari, bonus esclusi. <a href=\"https:\/\/dailyai.com\/it\/2026\/11\/openai-will-now-pay-up-to-172000-for-the-worst-chatgpt-bugs\/\" target=\"_blank\" rel=\"noopener\">L'azienda ha aumentato i tassi di remunerazione all'inizio di questo mese.<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Nelle prime ore del 12 novembre, ora di Parigi, OpenAI ha sostituito l'assistente in quello strumento di etichettatura con un breve script. Lo script chiede a un modello di inserire le etichette con i suoi strumenti disattivati e accetta solo risposte in un formato predefinito. <a href=\"https:\/\/github.com\/openai\/codex\/commit\/14e039906c927fb54e30c54e947eb7123e386815\" target=\"_blank\" rel=\"noopener\">La modifica \u00e8 visibile nell'elenco pubblico delle modifiche del progetto.<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">C'\u00e8 per\u00f2 un'avvertenza. Depi ha eseguito l'attacco completo sulla propria copia di prova, dove all'assistente era consentito scrivere file. L'assistente di OpenAI, invece, utilizzava una modalit\u00e0 di sola lettura pi\u00f9 restrittiva sin da maggio. <a href=\"https:\/\/github.com\/openai\/codex\/commit\/6afe00efda39d396ddc6703085ebfea7249889c8\" target=\"_blank\" rel=\"noopener\">L'impostazione compare nella versione del file relativa a quel mese.<\/a> Depi non specifica se l'attacco avrebbe funzionato in quella modalit\u00e0 e non segnala alcun aggiornamento dannoso che abbia raggiunto gli utenti.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Il consiglio che d\u00e0 a tutti gli altri \u00e8 di aspettare un po' prima che i programmi installino automaticamente i nuovi aggiornamenti. <a href=\"https:\/\/dailyai.com\/it\/2026\/11\/a-shared-chatgpt-link-could-have-handed-strangers-your-private-chats\/\" target=\"_blank\" rel=\"noopener\">Il mese scorso un altro team ha ricevuto un premio di 5.000 dollari per aver scoperto una falla nei link di chat condivisi.<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Perch\u00e9 \u00e8 importante:<\/strong> Gli assistenti virtuali basati sull'intelligenza artificiale, in grado di leggere testi scritti da sconosciuti, possono essere indotti ad agire di conseguenza. In questo caso, allo sconosciuto \u00e8 bastato segnalare un bug, e il bersaglio era uno strumento che esegue codice sui computer degli sviluppatori decine di milioni di volte al mese.<\/p>","protected":false},"excerpt":{"rendered":"<p>Codex, l'assistente di programmazione di OpenAI, \u00e8 stato scaricato 96,8 milioni di volte in un mese. I ricercatori affermano che una falsa segnalazione di bug avrebbe potuto consentire a un malintenzionato di inserire codice dannoso in una versione futura del programma. OpenAI ha corretto la falla e ha pagato una prima ricompensa di 1.000 dollari.<\/p>","protected":false},"author":16,"featured_media":16064,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[642],"tags":[],"class_list":["post-16063","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-security"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.8 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>A Flaw in OpenAI\u2019s Codex Put 97M Monthly Downloads at Risk<\/title>\n<meta name=\"description\" content=\"A fake bug report could have let attackers slip harmful code into Codex, which was downloaded 96.8 million times in a month. OpenAI has fixed it.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/dailyai.com\/it\/2026\/11\/codex-flaw-put-a-tool-downloaded-97-million-times-a-month-at-risk\/\" \/>\n<meta property=\"og:locale\" content=\"it_IT\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"A Flaw in OpenAI\u2019s Codex Put 97M Monthly Downloads at Risk\" \/>\n<meta property=\"og:description\" content=\"A fake bug report could have let attackers slip harmful code into Codex, which was downloaded 96.8 million times in a month. OpenAI has fixed it.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/dailyai.com\/it\/2026\/11\/codex-flaw-put-a-tool-downloaded-97-million-times-a-month-at-risk\/\" \/>\n<meta property=\"og:site_name\" content=\"DailyAI\" \/>\n<meta property=\"article:published_time\" content=\"2026-11-12T09:15:13+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-11-12T09:17:30+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/dailyai.com\/wp-content\/uploads\/2026\/11\/dai-house-16063.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1472\" \/>\n\t<meta property=\"og:image:height\" content=\"832\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"David Merry\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@DailyAIOfficial\" \/>\n<meta name=\"twitter:site\" content=\"@DailyAIOfficial\" \/>\n<meta name=\"twitter:label1\" content=\"Scritto da\" \/>\n\t<meta name=\"twitter:data1\" content=\"David Merry\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tempo di lettura stimato\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minuti\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"NewsArticle\",\"@id\":\"https:\\\/\\\/dailyai.com\\\/2026\\\/11\\\/codex-flaw-put-a-tool-downloaded-97-million-times-a-month-at-risk\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/dailyai.com\\\/2026\\\/11\\\/codex-flaw-put-a-tool-downloaded-97-million-times-a-month-at-risk\\\/\"},\"author\":{\"name\":\"David Merry\",\"@id\":\"https:\\\/\\\/dailyai.com\\\/#\\\/schema\\\/person\\\/285a97adb64b88751ac3440ece6b08a1\"},\"headline\":\"A Flaw in OpenAI\u2019s Codex Put 97 Million Monthly Downloads at Risk\",\"datePublished\":\"2026-11-12T09:15:13+00:00\",\"dateModified\":\"2026-11-12T09:17:30+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/dailyai.com\\\/2026\\\/11\\\/codex-flaw-put-a-tool-downloaded-97-million-times-a-month-at-risk\\\/\"},\"wordCount\":495,\"publisher\":{\"@id\":\"https:\\\/\\\/dailyai.com\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/dailyai.com\\\/2026\\\/11\\\/codex-flaw-put-a-tool-downloaded-97-million-times-a-month-at-risk\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/dailyai.com\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/dai-house-16063.jpg\",\"articleSection\":[\"Security\"],\"inLanguage\":\"it-IT\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/dailyai.com\\\/2026\\\/11\\\/codex-flaw-put-a-tool-downloaded-97-million-times-a-month-at-risk\\\/\",\"url\":\"https:\\\/\\\/dailyai.com\\\/2026\\\/11\\\/codex-flaw-put-a-tool-downloaded-97-million-times-a-month-at-risk\\\/\",\"name\":\"A Flaw in OpenAI\u2019s Codex Put 97M Monthly Downloads at Risk\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/dailyai.com\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/dailyai.com\\\/2026\\\/11\\\/codex-flaw-put-a-tool-downloaded-97-million-times-a-month-at-risk\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/dailyai.com\\\/2026\\\/11\\\/codex-flaw-put-a-tool-downloaded-97-million-times-a-month-at-risk\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/dailyai.com\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/dai-house-16063.jpg\",\"datePublished\":\"2026-11-12T09:15:13+00:00\",\"dateModified\":\"2026-11-12T09:17:30+00:00\",\"description\":\"A fake bug report could have let attackers slip harmful code into Codex, which was downloaded 96.8 million times in a month. OpenAI has fixed it.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/dailyai.com\\\/2026\\\/11\\\/codex-flaw-put-a-tool-downloaded-97-million-times-a-month-at-risk\\\/#breadcrumb\"},\"inLanguage\":\"it-IT\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/dailyai.com\\\/2026\\\/11\\\/codex-flaw-put-a-tool-downloaded-97-million-times-a-month-at-risk\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"it-IT\",\"@id\":\"https:\\\/\\\/dailyai.com\\\/2026\\\/11\\\/codex-flaw-put-a-tool-downloaded-97-million-times-a-month-at-risk\\\/#primaryimage\",\"url\":\"https:\\\/\\\/dailyai.com\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/dai-house-16063.jpg\",\"contentUrl\":\"https:\\\/\\\/dailyai.com\\\/wp-content\\\/uploads\\\/2026\\\/11\\\/dai-house-16063.jpg\",\"width\":1472,\"height\":832,\"caption\":\"A red fishing line runs from a navy document and hooks into an open navy cardboard box.\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/dailyai.com\\\/2026\\\/11\\\/codex-flaw-put-a-tool-downloaded-97-million-times-a-month-at-risk\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/dailyai.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"A Flaw in OpenAI\u2019s Codex Put 97 Million Monthly Downloads at Risk\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/dailyai.com\\\/#website\",\"url\":\"https:\\\/\\\/dailyai.com\\\/\",\"name\":\"DailyAI\",\"description\":\"The AI economy, measured.\",\"publisher\":{\"@id\":\"https:\\\/\\\/dailyai.com\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/dailyai.com\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"it-IT\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/dailyai.com\\\/#organization\",\"name\":\"DailyAI\",\"url\":\"https:\\\/\\\/dailyai.com\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"it-IT\",\"@id\":\"https:\\\/\\\/dailyai.com\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/dailyai.com\\\/wp-content\\\/uploads\\\/2023\\\/06\\\/Daily-Ai_TL_colour.png\",\"contentUrl\":\"https:\\\/\\\/dailyai.com\\\/wp-content\\\/uploads\\\/2023\\\/06\\\/Daily-Ai_TL_colour.png\",\"width\":4501,\"height\":934,\"caption\":\"DailyAI\"},\"image\":{\"@id\":\"https:\\\/\\\/dailyai.com\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/DailyAIOfficial\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/dailyaiofficial\\\/\",\"https:\\\/\\\/www.youtube.com\\\/@DailyAIOfficial\"],\"legalName\":\"Zero Hour Investments FZCO\",\"foundingDate\":\"2023\",\"slogan\":\"The AI economy, measured.\",\"description\":\"DailyAI tracks the AI economy in numbers: data trackers, research and plain-English news on jobs, spending, pricing and funding.\",\"address\":{\"@type\":\"PostalAddress\",\"addressCountry\":\"AE\"},\"contactPoint\":{\"@type\":\"ContactPoint\",\"contactType\":\"customer support\",\"url\":\"https:\\\/\\\/dailyai.com\\\/contact\\\/\"},\"founder\":{\"@type\":\"Person\",\"name\":\"David Merry\",\"url\":\"https:\\\/\\\/dailyai.com\\\/author\\\/davidmerry\\\/\",\"sameAs\":[\"https:\\\/\\\/www.linkedin.com\\\/in\\\/davidmerry\\\/\"]}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/dailyai.com\\\/#\\\/schema\\\/person\\\/285a97adb64b88751ac3440ece6b08a1\",\"name\":\"David Merry\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"it-IT\",\"@id\":\"https:\\\/\\\/dailyai.com\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/david-merry-dailyai.jpg\",\"url\":\"https:\\\/\\\/dailyai.com\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/david-merry-dailyai.jpg\",\"contentUrl\":\"https:\\\/\\\/dailyai.com\\\/wp-content\\\/uploads\\\/2026\\\/10\\\/david-merry-dailyai.jpg\",\"caption\":\"David Merry\"},\"description\":\"David Merry is the founder of DailyAI and a London-based entrepreneur. He co-founded Kyro, is a partner at Ki and writes about AI's impact on business, markets and everyday life.\",\"sameAs\":[\"https:\\\/\\\/www.linkedin.com\\\/in\\\/davidmerry\\\/\"],\"url\":\"https:\\\/\\\/dailyai.com\\\/it\\\/author\\\/davidmerry\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Una falla in Codex di OpenAI ha messo a rischio 97 milioni di download mensili","description":"Una falsa segnalazione di bug avrebbe potuto consentire agli aggressori di inserire codice dannoso in Codex, che \u00e8 stato scaricato 96,8 milioni di volte in un mese. OpenAI ha risolto il problema.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/dailyai.com\/it\/2026\/11\/codex-flaw-put-a-tool-downloaded-97-million-times-a-month-at-risk\/","og_locale":"it_IT","og_type":"article","og_title":"A Flaw in OpenAI\u2019s Codex Put 97M Monthly Downloads at Risk","og_description":"A fake bug report could have let attackers slip harmful code into Codex, which was downloaded 96.8 million times in a month. OpenAI has fixed it.","og_url":"https:\/\/dailyai.com\/it\/2026\/11\/codex-flaw-put-a-tool-downloaded-97-million-times-a-month-at-risk\/","og_site_name":"DailyAI","article_published_time":"2026-11-12T09:15:13+00:00","article_modified_time":"2026-11-12T09:17:30+00:00","og_image":[{"width":1472,"height":832,"url":"https:\/\/dailyai.com\/wp-content\/uploads\/2026\/11\/dai-house-16063.jpg","type":"image\/jpeg"}],"author":"David Merry","twitter_card":"summary_large_image","twitter_creator":"@DailyAIOfficial","twitter_site":"@DailyAIOfficial","twitter_misc":{"Scritto da":"David Merry","Tempo di lettura stimato":"2 minuti"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"NewsArticle","@id":"https:\/\/dailyai.com\/2026\/11\/codex-flaw-put-a-tool-downloaded-97-million-times-a-month-at-risk\/#article","isPartOf":{"@id":"https:\/\/dailyai.com\/2026\/11\/codex-flaw-put-a-tool-downloaded-97-million-times-a-month-at-risk\/"},"author":{"name":"David Merry","@id":"https:\/\/dailyai.com\/#\/schema\/person\/285a97adb64b88751ac3440ece6b08a1"},"headline":"A Flaw in OpenAI\u2019s Codex Put 97 Million Monthly Downloads at Risk","datePublished":"2026-11-12T09:15:13+00:00","dateModified":"2026-11-12T09:17:30+00:00","mainEntityOfPage":{"@id":"https:\/\/dailyai.com\/2026\/11\/codex-flaw-put-a-tool-downloaded-97-million-times-a-month-at-risk\/"},"wordCount":495,"publisher":{"@id":"https:\/\/dailyai.com\/#organization"},"image":{"@id":"https:\/\/dailyai.com\/2026\/11\/codex-flaw-put-a-tool-downloaded-97-million-times-a-month-at-risk\/#primaryimage"},"thumbnailUrl":"https:\/\/dailyai.com\/wp-content\/uploads\/2026\/11\/dai-house-16063.jpg","articleSection":["Security"],"inLanguage":"it-IT"},{"@type":"WebPage","@id":"https:\/\/dailyai.com\/2026\/11\/codex-flaw-put-a-tool-downloaded-97-million-times-a-month-at-risk\/","url":"https:\/\/dailyai.com\/2026\/11\/codex-flaw-put-a-tool-downloaded-97-million-times-a-month-at-risk\/","name":"Una falla in Codex di OpenAI ha messo a rischio 97 milioni di download mensili","isPartOf":{"@id":"https:\/\/dailyai.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/dailyai.com\/2026\/11\/codex-flaw-put-a-tool-downloaded-97-million-times-a-month-at-risk\/#primaryimage"},"image":{"@id":"https:\/\/dailyai.com\/2026\/11\/codex-flaw-put-a-tool-downloaded-97-million-times-a-month-at-risk\/#primaryimage"},"thumbnailUrl":"https:\/\/dailyai.com\/wp-content\/uploads\/2026\/11\/dai-house-16063.jpg","datePublished":"2026-11-12T09:15:13+00:00","dateModified":"2026-11-12T09:17:30+00:00","description":"Una falsa segnalazione di bug avrebbe potuto consentire agli aggressori di inserire codice dannoso in Codex, che \u00e8 stato scaricato 96,8 milioni di volte in un mese. OpenAI ha risolto il problema.","breadcrumb":{"@id":"https:\/\/dailyai.com\/2026\/11\/codex-flaw-put-a-tool-downloaded-97-million-times-a-month-at-risk\/#breadcrumb"},"inLanguage":"it-IT","potentialAction":[{"@type":"ReadAction","target":["https:\/\/dailyai.com\/2026\/11\/codex-flaw-put-a-tool-downloaded-97-million-times-a-month-at-risk\/"]}]},{"@type":"ImageObject","inLanguage":"it-IT","@id":"https:\/\/dailyai.com\/2026\/11\/codex-flaw-put-a-tool-downloaded-97-million-times-a-month-at-risk\/#primaryimage","url":"https:\/\/dailyai.com\/wp-content\/uploads\/2026\/11\/dai-house-16063.jpg","contentUrl":"https:\/\/dailyai.com\/wp-content\/uploads\/2026\/11\/dai-house-16063.jpg","width":1472,"height":832,"caption":"A red fishing line runs from a navy document and hooks into an open navy cardboard box."},{"@type":"BreadcrumbList","@id":"https:\/\/dailyai.com\/2026\/11\/codex-flaw-put-a-tool-downloaded-97-million-times-a-month-at-risk\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/dailyai.com\/"},{"@type":"ListItem","position":2,"name":"A Flaw in OpenAI\u2019s Codex Put 97 Million Monthly Downloads at Risk"}]},{"@type":"WebSite","@id":"https:\/\/dailyai.com\/#website","url":"https:\/\/dailyai.com\/","name":"DailyAI","description":"L\u2019economia dell\u2019IA, misurata.","publisher":{"@id":"https:\/\/dailyai.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/dailyai.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"it-IT"},{"@type":"Organization","@id":"https:\/\/dailyai.com\/#organization","name":"DailyAI","url":"https:\/\/dailyai.com\/","logo":{"@type":"ImageObject","inLanguage":"it-IT","@id":"https:\/\/dailyai.com\/#\/schema\/logo\/image\/","url":"https:\/\/dailyai.com\/wp-content\/uploads\/2023\/06\/Daily-Ai_TL_colour.png","contentUrl":"https:\/\/dailyai.com\/wp-content\/uploads\/2023\/06\/Daily-Ai_TL_colour.png","width":4501,"height":934,"caption":"DailyAI"},"image":{"@id":"https:\/\/dailyai.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/DailyAIOfficial","https:\/\/www.linkedin.com\/company\/dailyaiofficial\/","https:\/\/www.youtube.com\/@DailyAIOfficial"],"legalName":"Zero Hour Investments FZCO","foundingDate":"2023","slogan":"The AI economy, measured.","description":"DailyAI misura l\u2019economia dell\u2019IA in numeri: tracker di dati, ricerche e notizie in parole semplici su lavoro, spesa, prezzi e finanziamenti.","address":{"@type":"PostalAddress","addressCountry":"AE"},"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https:\/\/dailyai.com\/contact\/"},"founder":{"@type":"Person","name":"David Merry","url":"https:\/\/dailyai.com\/author\/davidmerry\/","sameAs":["https:\/\/www.linkedin.com\/in\/davidmerry\/"]}},{"@type":"Person","@id":"https:\/\/dailyai.com\/#\/schema\/person\/285a97adb64b88751ac3440ece6b08a1","name":"David Merry","image":{"@type":"ImageObject","inLanguage":"it-IT","@id":"https:\/\/dailyai.com\/wp-content\/uploads\/2026\/10\/david-merry-dailyai.jpg","url":"https:\/\/dailyai.com\/wp-content\/uploads\/2026\/10\/david-merry-dailyai.jpg","contentUrl":"https:\/\/dailyai.com\/wp-content\/uploads\/2026\/10\/david-merry-dailyai.jpg","caption":"David Merry"},"description":"David Merry \u00e8 il fondatore di DailyAI e un imprenditore con sede a Londra. \u00c8 co-fondatore di Kyro, partner di Ki e scrive sull&#039;impatto dell&#039;intelligenza artificiale sul business, sui mercati e sulla vita di tutti i giorni.","sameAs":["https:\/\/www.linkedin.com\/in\/davidmerry\/"],"url":"https:\/\/dailyai.com\/it\/author\/davidmerry\/"}]}},"_links":{"self":[{"href":"https:\/\/dailyai.com\/it\/wp-json\/wp\/v2\/posts\/16063","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dailyai.com\/it\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dailyai.com\/it\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dailyai.com\/it\/wp-json\/wp\/v2\/users\/16"}],"replies":[{"embeddable":true,"href":"https:\/\/dailyai.com\/it\/wp-json\/wp\/v2\/comments?post=16063"}],"version-history":[{"count":3,"href":"https:\/\/dailyai.com\/it\/wp-json\/wp\/v2\/posts\/16063\/revisions"}],"predecessor-version":[{"id":16067,"href":"https:\/\/dailyai.com\/it\/wp-json\/wp\/v2\/posts\/16063\/revisions\/16067"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/dailyai.com\/it\/wp-json\/wp\/v2\/media\/16064"}],"wp:attachment":[{"href":"https:\/\/dailyai.com\/it\/wp-json\/wp\/v2\/media?parent=16063"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dailyai.com\/it\/wp-json\/wp\/v2\/categories?post=16063"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dailyai.com\/it\/wp-json\/wp\/v2\/tags?post=16063"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}