… Hugging Face initially attributed the breach to an “external AI agent.” In a blog post published Tuesday afternoon , OpenAI detailed the steps that led the models to compromise the service. “After investigating, we now know that this particular incident was driven by a combination of OpenAI models … …
The ChatGPT desktop app for Mac just got hit with a security breach By Lawrence Bonk May 14, 2026 1:20 pm EST OpenAI's ChatGPT app for Mac just experienced a security breach involving two employee devices, according to a report by 9to5Mac . …
… On this episode of TechCrunch’s Equity podcast, hosts Kirsten Korosec, Anthony Ha, and Sean O’Kane dig into why Kimi K3 set off a fresh round of AI panic, the industry’s response to an OpenAI staffer’s “regulatory FUD” post, and what that OpenAI breach means for AI security more broadly. …
… The company promised further details on the system in a forthcoming blog post. The company’s official postmortem analysis of the event is also still pending. …
… But the company’s response also suggests a philosophy that has left many safety researchers alarmed: Rather than slowing down or stopping the development of more capable models, it should instead focus on building stronger cages around them. “As models take on longer and more complex tasks, failure… …
… OpenAI has continued to release new details about its own breach, saying its models also used publicly exposed credentials across four accounts on four services: one as a staging point, one for storage, and two that were only looked at, not used to break in further, according to OpenAI’s own update… …
OpenAI confirms security breach in TanStack supply chain attack By Lawrence Abrams May 14, 2026 03:07 PM OpenAI says two employees' devices were breached in the recent TanStack supply chain attack that impacted hundreds of npm and PyPI packages, causing the company to rotate code-signing certificat… …
… The breach exposed companies and services that incorporate LiteLLM and installed the tainted updates. There could be thousands of victims, including other major AI companies, but the breach at Mercor illustrates the sensitivity of the compromised data. …
… It also argues that placing AI development solely in the hands of a few closed providers creates dangerous single points of failure. “The right response is not to deny defenders access to capable open systems. …