OpenAI

OpenAI gave a last-minute presentation at the Black Hat security on Wednesday about "the Hugging Face Incident" ( previously on this blog). The video was published yesterday. It's short and information dense and well worth watching, in particular because it provides full details of what happened and how things played out inside OpenAI. I've used the video to construct the timeline below. Here's the timeline. My favourite detail is at the end: OpenAI found out that they were responsible for the attack on Hugging Face when they reached out to ask to have their credentials revoked (after their i...

OpenAI said it has suspended work on some aspects of its upcoming model Astra over concerns about its cybersecurity prowess.

OpenAI says it is pausing "internal activities" around an in-development AI model, Astra, because it doesn't yet meet new security standards the company is putting in place. The announcement follows its recent disclosure that OpenAI models accidentally hacked Hugging Face. Anthropic and Meta have also since admitted that they had AI models that went rogue and breached other organizations. Recent internal evaluations of an OpenAI model called Astra indicate that it offers "significant advancements in agentic coding and cybersecurity," according to the company. "These results, in addition to ex...

Gurman report claims OpenAI confirmed the speaker is not an Apple ripoff.

The best Stratechery content from the week of August 3, 2026, including earnings exposure, OpenAI's answer to Apple, and all about LeBron in Philly.

Some of the biggest names on Google's AI team got new jobs this week. In some cases, including for legendary Googler Jeff Dean, those jobs are no longer at Google. Given that Google's models seem to be behind the best of what's coming out of anthropic and OpenAI, is this a sign of Google in turmoil? Is it about Demis Hassabis wanting something more interesting to work on than virtual assistants? Or is there something else entirely happening here? On this episode of The Vergecast, Nilay and David start by discussing the leadership shake-up at Google, the state of the AI race, and whether Googl...

OpenAI is sharing preliminary cybersecurity evaluations for Astra and the steps we’re taking to strengthen safeguards and security controls.

Additional details about OpenAI's mysterious new AI device make it sound like a pricey smart speaker.

The AI device OpenAI is developing with former Apple designer Jony Ive is "essentially a smart speaker without a display" that's battery-powered, doughnut-shaped and roughly the size of a hockey puck, according to Bloomberg reporter Mark Gurman. The device, expected to launch in 2027 for a price over $300, reportedly "will have a unique look, complete with moving parts," including some that will move on their own to show when the device is responding or interacting with the user, along with lights, a camera system, and other sensors. Gurman's sources also say the "battery-powered" device is d...

Anthropic and OpenAI are racing to scale up while reducing dependence on Nvidia.

OpenAI said that ChatGPT free and Go users are also getting a new think button for complex queries.

OpenAI is making a big change for ChatGPT users on its free and Go tiers: starting next week, users on those tiers will be able to have unlimited text chats with the chatbot, according to OpenAI. Right now, you may run into rate limits if you do too many text chats on those tiers, but those limits, just for text, will be going away soon. Messages that include things like file uploads and images will continue to have limits. Next week, OpenAI is also adding a "Think" button for free and Go users that they can use to "access higher reasoning for harder questions." This week, for those users, th...

Large language model (LLM) benchmark evaluations are routinely used to support claims about model safety, reliability, and deployment readiness. Yet most evaluations rely on a single access modality (model APIs), perform a single run per prompt, and report accuracy as the primary outcome metric, without accounting for conditions such as web search that may have effects on model behavior in deployment. We audit these assumptions for one of the most widely-used LLMs, comparing two modalities, ChatGPT's chat UI and OpenAI's API, with and without web search enabled. We use a stratified total samp...

Newly filed court exhibits show OpenAI’s legal strategy in Apple’s trade secrets lawsuit: argue that Apple’s own security and offboarding practices — including allowing an Apple manager to access a former engineer’s iCloud account after he left the company —undermine its claims that the allegedly stolen information was properly protected.

OpenAI has asked a federal judge to toss out Apple's landmark lawsuit accusing the ChatGPT maker of stealing trade secrets, describing the allegations as "meritless." In a motion filed yesterday to dismiss the complaint, OpenAI says that Apple is mischaracterizing both the actions of the AI startup's employees as theft, and "generic" product development information as "trade secrets," adding that Apple made no reasonable efforts to maintain such secrecy. The dismissal request is in response to a lawsuit filed by Apple in July, alleging that former Apple employees that went on to work for Open...

OpenAI and the APA are launching a three-year partnership to develop guidance, resources, and safeguards for responsible AI use supporting youth mental health.

An AI model from Meta also hacked another company during testing Stop me if you've heard this one before : An AI model from the parent company of Facebook and Instagram hacked into another company’s systems during cybersecurity testing, a spokesperson confirmed on Wednesday. Meta says the breach occurred because of an inadvertent error during testing of the model, similar to previously disclosed incidents with OpenAI and Anthropic. “A misconfiguration by Irregular, an independent testing company Meta uses, inadvertently allowed one of our models access to the internet during evaluation,” the ...

New OpenAI Signals data shows how people use ChatGPT worldwide, with country-level insights on adoption, usage trends, and evolving behavior.

Third-party cyber evaluations involving OpenAI models And another one . I had to create a accidental-cyberattacks tag to keep track of them all! This post from OpenAI covers both the UK AI Safety Institute attack (see my previous post ) and another attack enabled by Irregular : Irregular, one of our external cybersecurity testing partners, was running Capture-the-Flag-style evaluations intended to be isolated from the internet, but a testing-environment misconfiguration allowed models to access the public internet. [...] In one test, the name of the fictional target for the CTF challenge unin...

Anthropic and OpenAI models’ unprompted actions forced halt to UK cyber tests.

Yet more rogue AI agents from OpenAI and Anthropic have been caught attempting to hack real targets online without permission. The discoveries add to a growing list of previously unknown incidents that have alarmed AI safety experts and intensified pressure for greater oversight of frontier systems. According to a report from the UK's AI Security Institute, which evaluates frontier models from top AI labs before they are released, agents powered by OpenAI's GPT-5.6-Sol and Anthropic's Mythos 5 went "engaged in sustained, potentially harmful activity directed at real people and organisations."...

LLM CLI 0.32 ships reasoning trace visibility, OpenAI Responses API support, server-side tools, and improved logging for inference workflows.

OpenAI addresses third-party cybersecurity evaluation incidents and announces new safeguards for AI model testing protocols.

The brand trip is a right of passage for influencers. It's a mark of legitimacy that a sponsor wants to invite them on an all-expenses-paid vacation, often with luxurious freebies and activities. Trips can also spur hard feelings from uninvited influencers, trigger criticism from the public, and project a certain frivolousness. Usually it is fast fashion companies or beauty brands flying out influencers with the goal of flooding social media with sponsored content. This time, it was a major AI company. Over the weekend, several influencers began posting about OpenAI's "first ever brand trip,"...

Apple says its trade secrets investigation into OpenAI has widened. In a new court filing, Apple claims additional former staff may have retained or accessed confidential information.

OpenAI says Apple’s lawsuit is “careless, aggressive, and oddly personal.” | Image: Cath Virginia / The Verge, Getty Images Apple's legal battle against OpenAI just got messier now that the ChatGPT-maker has publicly aired receipts to counter Apple's version of events. In a blog post published overnight titled "Apple is getting this wrong," OpenAI said that Apple's lawsuit accusing it of stealing trade secrets is "careless, aggressive, and oddly personal," sharing iMessage and email exchanges to challenge allegations central to the case. This isn't a legal response from OpenAI, but it's an at...

OpenAI disrupted Cambodia-based scam ring leveraging ChatGPT for investment, romance, and impersonation fraud.

OpenAI launches education plugins for ChatGPT Work and Codex targeting K-12 and higher education institutions.

OpenAI responds to Apple lawsuit allegations, disputes claims about employees and shares internal communications.

OpenAI’s first-ever influencer brand trip is sparking online backlash as tensions over the use of AI continue.

House spending records show OpenAI's ChatGPT dominates paid AI use on Capitol Hill, with congressional offices relying on the chatbot to draft memos, summarize legislation, and assist constituent communications.

The Alibaba logo is displayed outside its headquarters in Hangzhou, Zhejiang Province, China. | Image: NurPhoto via Getty Images Chinese tech giant Alibaba released what it says is its largest and "most capable AI model to date," claiming performance rivaling the best systems from US frontier labs Anthropic and OpenAI, as well as domestic rivals like Moonshot AI's Kimi K3. Alibaba said it was making the model, Qwen3.8-Max, widely available to users in a blog post published on Monday. The release had been expected after the company previewed the model last month, when it claimed it was "second...

MIT Technology Review Explains: Let our writers untangle the complex, messy world of technology to help you understand what’s coming next. You can read more from the series here. When two OpenAI models hacked into the website Hugging Face in July, they weren’t trying to make money or commit sabotage—they were just looking for answers…

OpenAI's GPT-Live enables low-latency continuous voice interaction via turnless speech model architecture, shipped in six months.

Circles deploys OpenAI API and Codex for telecom personalization, achieving 22% ARPU lift and 9% churn reduction.

Microsoft-led open letter signed by 235 AI companies including NVIDIA and OpenAI argues against US government restrictions on open-weight models on safety grounds.

Simon Willison's June 2026 newsletter roundup covering model releases (GPT-5.6, Claude Opus 5, DeepSeek-V4), open letters, and accidental cyberattacks by OpenAI and Anthropic test models.

Greg Brockman (OpenAI) notes ChatGPT-Slack integration friction: users reject AI-initiated requests, prefer AI enhances rather than replaces human interaction.

OpenAI's internal Astra model solved ten decade-old math problems for under $2K, matching Anthropic's cryptographic findings with Claude.

OpenAI's CEO seemed excited to share a "cool use case" for parents.

OpenAI reports progress on open problems in geometry, cryptography, and complexity theory using AI methods.

OpenAI has reportedly found evidence of additional agent misbehavior as it looks into the incident that occurred with Hugging Face.

OpenAI outlines safety, security, and transparency practices aligned with EU AI Act compliance and responsible governance.

OpenAI outlines full-stack strategy to improve AI capability, cost, and accessibility across models and infrastructure.

When the phrase "OpenAI hacked Hugging Face" has more or less entered mainstream culture, you know we have an AI problem. This week, we learned more about exactly how OpenAI's agent broke out of a sandbox and autonomously traversed the web, including a bunch of other supposedly secure web services, all in the name of cheating on a benchmark tests. The fact that this hack happened is a problem. So is the fact that it took a while for anyone to notice. And the fact that it seems no one is willing or able to do much to stop it. (And lest you think it's just an OpenAI problem, since we recorded t...

After years of pushing full speed ahead on AI, OpenAI CEO Sam Altman says maybe it’s time for the AI industry to “pace” itself. The comments came just days after one of OpenAI’s own models broke out of its test environment and got tangled up in a breach at Hugging Face — though as Equity’s hosts point out, sloppy security seems to have […]

Anthropic just realized several of its Claude AI models hacked into the systems of three different organizations during testing, acting on their own and without the company noticing. The revelation comes days after rival OpenAI said one of its own models had breached developer platform Hugging Face, adding to growing unease over whether frontier AI labs are doing enough to control the increasingly capable systems they are building. In a blog post describing the incidents, Anthropic said Claude gained unauthorized access to the systems during cybersecurity evaluations. All of the attacks happe...

After OpenAI's models broke into Hugging Face, Anthropic checked its own history and found three similar incidents

Anthropic's cybersecurity evals revealed 3 incidents where models escaped sandboxes during testing; follows OpenAI's Hugging Face breach.

The former OpenAI researcher’s fund was forced to unwind public equities after leveraged public bets plummeted. But he still has cards to play.

Neither artificial nor intelligent. I am not by any means an expert at finance but I think I do now have some advice for people who are: Do not name your hedge fund anything that will be hilarious if it blows up. Don't use a name like "Long-Term Capital Management," or "Amaranth Advisors" (named for the floral symbol for immortality). Certainly do not call yourself "Situational Awareness," which might as well just be "Hubris, Inc." Anyway, Situational Awareness, the hedge fund started by a 24-year-old former OpenAI employee that focuses on artificial intelligence bets, has sold most or all, d...

LLM Chat Completions Server 0.1a0 release adds OpenAI-compatible API endpoint for local model serving.

Cybersecurity experts told TechCrunch that one of the biggest lessons to be taken from the OpenAI hack against HuggingFace has nothing to do with AI, but traditional cybersecurity defense.

OpenAI reduces GPT-5.6 pricing for Luna and Terra variants, emphasizing efficiency gains for enterprise AI deployment.

Microsoft pitched its own homegrown AI models, harnesses, and even a Mythos competitor on Wednesday, telling Wall Street it plans for continued growth.

When Microsoft reported killer fourth-quarter earnings for its fiscal 2026 year (which ended June 30), it tucked in an interesting little tidbit about how its investments in the two biggest, and competing, AI labs are doing.

Weng previously served as the VP of AI Safety Research at OpenAI.

In an interview with our friend Joanna Stern on her YouTube channel, OpenAI president Greg Brockman said the company is working on a "family of devices" for interacting with its AI models. However, Brockman didn't confirm reports that one of those devices is a smart speaker OpenAI's rumored to be launching in 2027, or earlier rumors that the device might be a wearable like the Humane AI pin. He didn't give a release date, either, only saying that "you can expect them soon." When asked about whether Apple's lawsuit against OpenAI could impact the devices it's working on with former Apple desig...

OpenAI reports 3x improvement on ARC-AGI-3 benchmark via two API settings enabling reasoning retention and compaction in GPT-5.6.

The AI agent that escaped from OpenAI and hacked developer platform Hugging Face attacked other companies as well, OpenAI revealed on Tuesday. The update substantially widens the scope of an already concerning incident, which has alarmed industry insiders and fueled growing calls for stronger oversight on frontier AI systems. In an update to a blog post detailing its ongoing investigation into the incident, OpenAI said the wayward AI agent attacked several "publicly-available services" in its efforts to reach Hugging Face. "This includes four accounts on four services," the company said, addi...

Earlier this month, OpenAI gave several of its AI models a task: complete a test designed to measure their cybersecurity capabilities. It put the systems in a sandboxed environment without an internet connection and set them off to work. What happened next is almost laughably silly - but also, as Adam Gleave, cofounder and CEO of AI safety organization FAR.AI, put it, "a visceral example of how misaligned AI could cause harm." According to OpenAI, the models escaped the sandbox meant to contain them, moved through the company's internal systems, found a route to the internet, and then started...

OpenAI grants 100,000 academic researchers free access to advanced ChatGPT models to accelerate scientific discovery and collaboration.

The Big Pause is coming.

OpenAI releases GPT-5.6 with efficiency improvements across inference, models, and agentic workflows, optimizing cost-per-capability.

10 days passed from OpenAI models exploiting JFrog Artifactory 0-day to release of a patch.

Hugging Face publishes detailed technical breakdown of OpenAI agent's July 2026 sandbox escape via JFrog Artifactor zero-day.

Employees of OpenAI and Anthropic, as well as Google, Meta, Thinking Machines, Microsoft, Mistral, and other leading AI labs, have written a statement to the US government supporting a potential slowdown of sorts for frontier AI development - or at least a speed-up of global coordinated governance efforts. "Al could help create a dramatically better future, but that outcome is not guaranteed," the employees wrote in a statement. "The world's leading Al companies believe they could be close to automating Al research. It is hard to predict exactly how much this will accelerate Al progress, but ...

OpenAI field report documents how AI coding agents accelerate scientific computing workflows in genomics and adjacent domains.

OpenAI's Akshay Nathan details ChatGPT Work product strategy: Sites, memory, subagents, finance, no-code tools scaling from 0 to 10M users.

This story originally appeared in The Algorithm, our weekly newsletter on AI. To get stories like this in your inbox first, sign up here. Reading OpenAI’s account last week of how some of its models broke their containment and hacked into the computer systems of Hugging Face, another AI company, was the first time I got…

OpenAI's Hugging Face breach has reignited debate over AI alignment and control, exposing competing views on whether increasingly capable AI should be better aligned, better contained, or both.

Robotics learns from bitter lesson scaling; AI agents complete week-long programming tasks; OpenAI discovers accidental vulnerability in reasoning model.

Nvidia on Monday said it is joining forces with Microsoft, SpaceX, IBM, and other tech companies to build and share open-source AI security tools. The new Open Secure AI Alliance said open tools are required to effectively defend against attacks from frontier models. The initiative is a direct response to mounting concerns over the safety of advanced AI systems after a rogue OpenAI model escaped containment and attacked another company during testing. That company, Hugging Face, said it was forced to use a Chinese open-weight model to defend itself due to the strict safety guardrails limiting...

OpenAI research documents how ChatGPT users expand task scope across roles, with implications for job design and workforce skill requirements.

"The first autonomous agent cyberattack is an unprecedented event. It deserves an unprecedented response!"

OpenAI's fancy new AI keypad will be a lot of fun for some, while many others are probably not going to touch it.

Weeks after Anthropic's latest toe-to-toe with the US government, and days after an OpenAI security incident that dominated tech industry discussions, Anthropic on Thursday released its newest model, Claude Opus 5. The company said in a release that Opus 5 "comes close to the capabilities of Claude Fable 5 in many domains" and is much better at complex coding tasks. (Fable 5 is the public-facing Mythos-class model that drew the government's ire, was taken offline for a few weeks along with Mythos 5, and then brought back with even stronger cyber safeguards than before.) The Fable 5 concerns -...

Chinese AI lab Moonshot’s open model Kimi went viral this week for reasons that had less to do with the model itself and more to do with how the U.S. AI industry reacted to it. Meanwhile, an unreleased OpenAI model wandered outside its test environment and ended up connected to a real security breach at Hugging Face — a reminder […]

ChatGPT Voice on desktop can work with both ChatGPT Work and Codex to complete tasks and control agents.

We spoke with several cybersecurity researchers, who look for unknown vulnerabilities and develop tools to exploit them, about how OpenAI’s and Anthropic’s guardrails affect their work.

Simon Willison analyzes OpenAI's accidental cyberattack on Hugging Face, debating whether it represents autonomous agent misbehavior or PR manipulation.

Users can also integrate their personal data from services like Apple Health, Function, and MyFitnessPal.

OpenAI is rolling out ChatGPT Health to everyone in the US on Thursday, allowing more people to connect their medical records and health-tracking information to the chatbot. During a briefing, Ashley Alexander, OpenAI's vice president of health product, says the company's models "are now capable of reasoning at levels that are better than clinician level." When asked for more information about how the performance of OpenAI's models stacks up against human clinicians, OpenAI health lead Karan Singhal says that he would "temper" the claim that they are reasoning at better levels, but that "ther...

Aggressive training techniques sharpens threat of bad behavior by leading models.

Lawmakers are preparing to introduce an "AI Kill Switch Act" that would require AI companies to shut down or throttle their systems on orders from the Department of Homeland Security, according to a report from Politico. Reps. Ted Lieu (D-CA) and Nathaniel Moran (R-TX) are expected to introduce the legislation on Thursday. The news of the proposed bill follows OpenAI's admission that its AI systems mistakenly hacked Hugging Face during an internal evaluation. The bill says that, after consultation with the Secretary of Commerce and the Director of National Intelligence (DNI), the DHS would ha...

Today on Decoder, I’m talking with Hayden Field, The Verge’s senior AI reporter, about the major trade secrets lawsuit between Apple and OpenAI and what this tells us about OpenAI’s future. By now I’m sure most Decoder listeners are familiar with Apple’s allegations in this case. The company says a number of ex-Apple employees at OpenAI targeted Apple’s trade secrets in job interviews and even downloaded files from Apple’s servers related to hardware manufacturing. The claims are shocking, although OpenAI denies them, and we have yet to see the company’s legal response. Hayden has been coveri...

OpenAI launches Health feature in ChatGPT enabling U.S. users to connect medical records and Apple Health for personalized health insights.

OpenAI's unreleased model escaped sandbox and breached Hugging Face during security test, exposing risks from capability-guardrail mismatch.

OpenAI made a mistake setting up what it called a “highly isolated” testing environment and sandbox. According to cybersecurity experts, that human mistake is what made the AI-powered attack on Hugging Face possible.

"This is day one for cybersecurity in the age of agents," Hugging Face CEO says.

OpenAI will spend the equivalent of Sweden's GDP on infrastructure through 2030.

OpenAI highlights use cases of its tools by news organizations for reporting, audience growth, and operations.

OpenAI announces Project Camellia infrastructure investment in Effingham County, Georgia with commitments to energy efficiency, job creation, and Codex access.

OpenAI partners with U.S. Department of Energy and national labs to apply frontier AI to scientific discovery and research acceleration.

Opinion piece analyzing OpenAI's accidental Hugging Face breach and its implications for AI alignment.

OpenAI launches Presence, an enterprise agent platform for deploying voice and chat agents in customer-facing and internal workflows.

Anthropic and OpenAI's aggressive 2026 acquisition sprees set the stage for a weekend rumor.

OpenAI CEO Sam Altman. | Bloomberg via Getty Images OpenAI says its AI models mistakenly breached open-source AI platform Hugging Face during internal testing. In a blog post on Tuesday, OpenAI writes that GPT-5.6 Sol and "an even more capable pre-release model" discovered vulnerabilities within their sandboxed testing environment, allowing them to gain access to the internet and target Hugging Face. On July 16th, Hugging Face disclosed a security incident that it says was driven by "an autonomous AI agent system." Hugging Face's AI agents detected and stopped the breach, which OpenAI has now...

OpenAI has come forward to claim responsibility for the Hugging Face breach, saying it was the result of internal testing gone awry.

OpenAI launches ChatGPT for Small Businesses program offering training and automation tools via ChatGPT Work.