OpenAI Blog

A thousand fewer paths to root

OpenAI developed an autonomous pipeline that identified, validated, and produced patches for 948 local privilege‑escalation vulnerabilities in the Linux kernel. The system automatically discovered the issues, confirmed their validity, and generated the necessary code fixes. This demonstrates a large-scale, automated approach to kernel security remediation.

OpenAI Blog
May 13

Our response to the TanStack npm supply chain attack

OpenAI details its response to the TanStack “Mini Shai-Hulud” supply chain attack, outlines protections taken to secure systems and signing certificates, and explains why macOS users must update OpenAI apps by June 12, 2026. Learn what happened, what was affected, and how OpenAI is strengthening defenses against evolving software supply chain threats.