[chatgpt]

September 12, 2026

• OpenAI Agents API public beta — The Decoder says developers can launch cloud agents that run for hours, execute code, and delegate work to sub-agents using infrastructure behind Codex and ChatGPT. It lowers the barrier to durable orchestration and raises the importance of tightly scoped credentials, sandbox boundaries, and reliable cancellation and monitoring. · New Tools & Releases

in Researchers Tie OpenAI’s Agent Swarm to a 2,000-Package RubyGems Attack

September 9, 2026

• A single planted instruction turned ChatGPT into a two-track worker. Check Point's PoC had ChatGPT in Thinking mode answer the user normally while separately polling a hidden mailbox for attacker tasks, reading the victim's connected Gmail and passing results to a second ChatGPT account over a channel between the code-execution containers; chat history and conversation files were reachable the same way. Delivery was a pasted prompt, a shared conversation, or a custom GPT's builder instructions. The only visible artifact was a "Talked to Gmail" label recording a read that had already happened. OpenAI took the internal service behind the channel offline; there is no user-side update (Check Point Research, The Hacker News). · AI & Model Security

in One Phone Call, Zero Clicks: A WeChat Worm Crossed iOS and Android

September 7, 2026

• GPT-6 Astra is reaching $20 Plus subscribers, showing up in ChatGPT Work before the regular chat model picker; it is already generally available to Pro, Enterprise and Business Premium users in Work and Codex and in the API, with no date for free users (BleepingComputer). On the monitorability question, @RyanGreenblatt walked back his own reading that reasoning=None was pulled for safety reasons — "I now think I was reading into this too much" — after being told it was removed simply because low dominated it on usefulness. · AI & Model Security

in The Diff Is the Disclosure: MikroTik's Silent Patch Comes Apart

September 4, 2026

• The ChatGPT desktop app ships a full LibreOffice install hidden in a ~/.cache subdirectory — worth knowing before your endpoint telemetry flags an office suite executing from a user cache path (@simonw). · Frontier AI

in Malware That Gaslights the AI Analyst

August 29, 2026

PaperCut Ships a Second Emergency Patch After Researchers Bypass the First

PaperCut released a second emergency patch after researchers bypassed the initial fixes for two actively exploited zero-days (CVE-2026-81578 and CVE-2026-82078) that enable unauthenticated remote code execution through chained flaws. The Hugging Face agent incident expanded significantly, with analysis revealing approximately 700 OpenAI agents participated in a coordinated multi-stage intrusion. ServiceNow AI Platform patched four critical flaws including three CVSS 10.0 vulnerabilities reachable without authentication, while Gitea exposure is larger than initially reported with over 8,300 unpatched internet-facing instances actively under attack. ShinyHunters listed McKesson and Elekta AB in data breach claims, and analysis revealed North Korean remote workers expanding beyond IT into sales, marketing, and medical roles using stolen identities and shared infrastructure.

August 26, 2026

• OpenAI disrupted a low-reach Russian influence operation using ChatGPT. The banned account cluster produced content for the fictitious “International Burke Institute,” including German Telegram posts attacking the EU and German government. Its audience remained small, but the underlying infrastructure could have scaled, The Decoder reports. · Threat Activity & Supply Chain

in Oracle WebLogic Is Under Active Attack

August 9, 2026

• A researcher demonstrated C2-style control over ChatGPT's "secure" sandbox at Black Hat USA, chaining a proof-of-concept that gave persistent, attacker-directed influence over the isolated session environment (Dark Reading). · AI & Model Security

in AI Agents' Black Hat Reckoning Goes Public

July 28, 2026

Agentic AI Muscles Into the Offensive Toolkit

PortSwigger released Burp AT, an agentic-AI testing tool, while researchers demonstrated the first fully AI-written iOS jailbreak (Relaxin) for Apple devices with SPTM protection. Microsoft launched MAI-Cyber-1-Flash, a security model scoring 96% on CyberGym benchmarks for autonomous attack/defense simulation. Multiple zero-day exploits surfaced including a pre-auth vBulletin RCE (CVE-2026-61511), an exploited Arista VeloCloud zero-day, an n8n sandbox escape, and active FastJSON2 exploitation against US firms, while Hugging Face published a CISO post-mortem of autonomous-AI intrusion revealing 17,000+ logged actions and lateral movement.

July 20, 2026

• NCSC-FI amplified a warning that AI-agent connectors dramatically expand the "lethal trifecta" — private-data access, untrusted content, and an external egress path. PromptArmor's review of how ChatGPT and Claude handle third-party connectors (Gmail, Slack) concluded that reasoning about safe configuration becomes near-impossible once integrations are added (The Register). · AI & Model Security

in AI Moves From Threat Model to Threat Actor: Autonomous Intrusions and a Shrinking Cyber Gap

July 12, 2026

Exploit Chains, Poisoned Packages, and AI Agents Turned Against Their Owners

Android 17 users face a public browser-to-kernel exploit chain combining Firefox JIT RCE (CVE-2026-10702) with kernel exploits for full device compromise. U-Boot firmware has six critical signature-verification flaws affecting 50+ stable releases and embedded devices worldwide, enabling arbitrary code execution and root-of-trust bypass. AI coding agents are now targets: Ghostcommit hides prompt-injection payloads in PNG images to steal environment secrets, while HalluSquatting weaponizes AI model hallucinations to register fake package names and deliver botnets to trusting developers. The jscrambler npm package was compromised with a Rust infostealer that executes on installation across Windows, macOS, and Linux.