OpenAI frames the present period as the "AI policy window," or "defenders window." This is a finite period in which meaningful defenses and safeguards can be established before advanced AI offensive capability becomes too broadly available. The developer calls for "acting with urgency, humility, and a willingness to adapt" and AI safety rules that raise the defensive bar materially.
OpenAI is calling on governments, tech firms and cybersecurity companies to immediately begin engaging in a "collective response" to the new attack capabilities demonstrated by AI in recent months. Among other items, the company stresses that every organization must now make cyber defense an immediate leadership priority.
Both suspected state-backed foreign adversaries and more run-of-the-mill cyber criminals appear to mostly still be focused on using AI tools to make their existing operations faster, more efficient and more error-free. OpenAI's ChatGPT and other models appear to have fairly strong guardrails that are highly resistant to creation of malware or automation of attack operations.
New papers from OpenAI discussing the rogue actions of their AI models are becoming almost a weekly feature at this point. The latest of these, titled "Our framework for reporting model misalignment," describes six newly-documented instances that took place sometime in the last few months.
OpenAI is facing a number of copyright lawsuits that could shape the future of generative AI, and one of the biggest comes from the New York Times. OpenAI is now accusing the paper of what is essentially evidence fabrication, claiming that it hacked ChatGPT to produce results containing content from its articles.
A new OpenSSH vulnerability discovered by threat researchers is the biggest security issue to appear in the utility suite in about two decades. The bug is an unauthenticated RCE vulnerability that builds on a prior issue that was patched out in 2006.
Europol has dismantled a cybercrime operation tied to Elysium, Rhadamanthys, and VenomRAT malware networks, which stole millions of credentials and over 100,000 crypto wallets.
Optus disclosed a cyber attack that compromised the personal data of up to 10 million Australians with a threat actor initially demanding $1 million and several sources suggesting human error as the cause.
Australia's lead data privacy regulator is suing telecommunications giant Optus over the massive 2022 data breach that caused chaos for over a third of the national population, for an as-yet undisclosed sum.
The consumer privacy lawsuit alleged that Oracle made $42.5 billion annually by surreptitiously creating "dossiers" on millions of people that it sold off to both private and government parties.










