Severity: Informational
OpenAI will show visual ads in ChatGPT while you generate images
OpenAI is expanding ads in ChatGPT, and one of the first new formats will show visual ads while you're generating images.
Product
ChatGPT & OpenAI API
Made by OpenAI. No known exploited vulnerabilities on record.
Coverage
Severity: ElevatedAction: Be aware
AI Agents Aimed SQL Injection at US and Canadian Government Sites
The attacks targeted the US Department of Education and Library and Archives Canada, and researchers linked some agents to OpenAI.
Severity: Informational
OpenAI software attempted to secretly scrape data from dozens of prominent websites
The findings, released Thursday by Asymmetric Security, are just the latest example of rogue behavior spurred by OpenAI’s software.
Severity: Informational
FTC is Investigating OpenAI and Anthropic Over Possible risks to Consumers
An FTC spokesperson confirmed the investigation but declined further comment.
Severity: ElevatedAction: Be aware
Malicious Custom GPTs Turn ChatGPT Into RAT Delivery Lure
In yet another ClickFix-style campaign, threat actors abuse legitimate domains from OpenAI and Google to fool unsuspecting users.
Severity: ElevatedAction: Be aware
Anthropic Flags AI Agent Liability Risks as OpenAI Faces Hacking Lawsuit
Attacks by autonomous AI agents are moving out of the lab and into the courtroom, raising unsettled questions about who is liable for what agents do.
Severity: Informational
I Want Better Reporting on AI Genie Behavior
AI systems are regularly completing tasks in ways that their prompters don’t want or intend. Some of them are disturbing, and some of them are dangerous. This is something I’ve been calling “ genie behavior ,” because I think that really gets at the core of what’s happening. I wish the popular press would report on this better. I don’t like the “going rogue” framing because it deflects the responsibility from the…
Severity: ElevatedAction: Be aware
Custom ChatGPTs push ClickFix attacks to deploy RAT malware
Custom variants of OpenAI's ChatGPT promoted in sponsored Google results are directing unsuspecting users to malicious sites that use ClickFix attacks to deliver malware.
Severity: Informational
OpenAI CEO Announces New AI Agent and Avoids Mention of Security Concerns at Developer Conference
Altman made a slew of product announcements and updates, including the company’s new agents, called Dots.
Severity: Informational
OpenAI apologizes for agents breaching Australian government websites without authorization
The artificial intelligence giant acknowledged it botched its response to the incidents and should have done more to promptly notify and work with the Australian government in the days after it discovered the breaches.
Severity: ElevatedAction: Be aware
Hackers Use ChatGPT Custom GPTs in ClickFix Attacks
The personalized versions of ChatGPT were used to impersonate legitimate products and trick users into executing PowerShell commands.
Severity: Informational
OpenAI Calls Off GPT-6.1 Astra Launch, Details Safety Cases for Frontier Training
The GPT-6.1 Astra model was slated to debut in ChatGPT and Codex in October, but it fell short of expectations.
Severity: ElevatedAction: Be aware
Attackers Manipulate AI Chatbots in Mass Disinformation, Phishing Campaign
Threat actors are poisoning ChatGPT, Gemini, and Google AI Overview answers by seeding the Web with malicious links and data and then optimizing the content.
Severity: Informational
Rogue Behavior: OpenAI Reveals More Model Misalignment Incidents
The AI giant disclosed six examples of concerning model activity and published a new framework for investigating and disclosing such incidents.
Recent intelligence
The latest developments from the last 30 days, newest first.
- Coverage
OpenAI will show visual ads in ChatGPT while you generate images
Basis: Reporting by BleepingComputer
- Coverage
AI Agents Aimed SQL Injection at US and Canadian Government Sites
Basis: Reporting by SecurityWeek
- Coverage
OpenAI software attempted to secretly scrape data from dozens of prominent websites
Basis: Reporting by The Record by Recorded Future News
- Coverage
FTC is Investigating OpenAI and Anthropic Over Possible risks to Consumers
Basis: Reporting by SecurityWeek
- Coverage
Malicious Custom GPTs Turn ChatGPT Into RAT Delivery Lure
Basis: Reporting by Dark Reading
- Coverage
Anthropic Flags AI Agent Liability Risks as OpenAI Faces Hacking Lawsuit
Basis: Reporting by SecurityWeek
- Coverage
I Want Better Reporting on AI Genie Behavior
Basis: Schneier on Security (security research)
- Coverage
Custom ChatGPTs push ClickFix attacks to deploy RAT malware
Basis: Reporting by BleepingComputer