OpenAI Blog
Apr 10
Our response to the Axios developer tool compromise
OpenAI responds to the Axios supply chain attack by rotating macOS code signing certificates, updating apps, and confirming no user data was compromised.
Our response to the TanStack npm supply chain attack
OpenAI details its response to the TanStack “Mini Shai-Hulud” supply chain attack, outlines protections taken to secure systems and signing certificates, and explains why macOS users must update OpenAI apps by June 12, 2026. Learn what happened, what was affected, and how OpenAI is strengthening defenses against evolving software supply chain threats.
Related stories
OpenAI Blog
Jun 9, 2025
Scaling security with responsible disclosure
OpenAI introduces its Outbound Coordinated Disclosure Policy to guide how it responsibly reports vulnerabilities in third-party software—emphasizing integrity, collaboration, and proactive security at scale.
OpenAI Blog
Oct 7, 2025
Disrupting malicious uses of AI: October 2025
Discover how OpenAI is detecting and disrupting malicious uses of AI in our October 2025 report. Learn how we’re countering misuse, enforcing policies, and protecting users from real-world harms.
OpenAI Blog
Mar 26, 2025
Security on the path to AGI
At OpenAI, we proactively adapt, including by building comprehensive security measures directly into our infrastructure and models.
OpenAI Blog
Mar 9
OpenAI to acquire Promptfoo
OpenAI is acquiring Promptfoo, an AI security platform that helps enterprises identify and remediate vulnerabilities in AI systems during development.
OpenAI Blog
Feb 5
Introducing Trusted Access for Cyber
OpenAI introduces Trusted Access for Cyber, a trust-based framework that expands access to frontier cyber capabilities while strengthening safeguards against misuse.
arXiv AI
Jun 3
OpenAgenet/OAN: Open Infrastructure for Trusted Agent Interconnection
arXiv:2606. 03161v1 Announce Type: cross Abstract: OpenAgenet, abbreviated as OAN, is an open infrastructure project for trusted Agent interconnection.
OpenAI Blog
Mar 18, 2024
Enterprise-ready trust and safety
Salesforce integrates OpenAI’s enterprise-ready LLMs to transform customer applications.
OpenAI Blog
Jun 11
OpenAI to acquire Ona
OpenAI plans to acquire Ona to expand Codex with secure, persistent cloud environments, enabling long-running AI agents across enterprise workflows.
OpenAI Blog
Dec 22, 2025
One in a million: celebrating the customers shaping AI’s future
More than one million customers around the world now use OpenAI to empower their teams and unlock new opportunities. This post highlights how companies like PayPal, Virgin Atlantic, BBVA, Cisco, Moderna, and Canva are transforming the way work gets done with AI.
OpenAI Blog
Mar 25
Introducing the OpenAI Safety Bug Bounty program
OpenAI launches a Safety Bug Bounty program to identify AI abuse and safety risks, including agentic vulnerabilities, prompt injection, and data exfiltration.
OpenAI Blog
Apr 14
Trusted access for the next era of cyber defense
OpenAI expands its Trusted Access for Cyber program, introducing GPT-5. 4-Cyber to vetted defenders and strengthening safeguards as AI cybersecurity capabilities advance.