Saudi OpenAI employee charged with bugging a San Francisco conference room
Prosecutors say he plugged a $13.90 SEEED board into a TV USB port, hid it in toilet paper, and queried ChatGPT on how to record.
62
Victim
OpenAI
- Mentions · 7d0
- Mentions · 30d17
- All mentions43
- First seenAug 18, 2026
- Last mentioned9d ago
Timeline
43 articles · newest firstEx-OpenAI engineer detained over alleged secret conference-room recorder
Prosecutors say Abdulrahman Alfozan, 35, recorded an executive room and had frequent contact with a Saudi royal.
58
Judge detains ex-OpenAI engineer accused of bugging conference room
Prosecutors say he was days from flying to Saudi Arabia and in contact with a royal recruiting him to an AI venture.
62
Court detains ex-OpenAI engineer accused of bugging executive meetings
Prosecutors say Abdulrahman Alfozan researched and encrypted a hidden recorder and messaged a Saudi royal before a planned one-way trip to Riyadh.
64
US court keeps ex-OpenAI engineer detained on alleged spying
Prosecutors say he planted recording devices and had a Saudi-paid one-way ticket to Riyadh.
63
Judge orders former OpenAI engineer accused of bugging room held
Abdulrahman Alfozan faces up to five years on one interception count; the next hearing is November 6.
62
Recording device hidden in toilet paper found in top-secret OpenAI meeting room
The FBI arrested an OpenAI engineer accused of planting a hidden recorder in a secure meeting room.
66
Alleged OpenAI spy vibe-coded a surveillance device using his wife's chatbot account
A former OpenAI engineer was arrested for allegedly planting a covert recorder designed with chatbot prompts.
74
Hidden Audio Recorder Found at OpenAI as Employee Faces Federal Charges
An OpenAI employee was federally charged after allegedly hiding audio recorders in executive conference rooms.
78
OpenAI engineer charged after boardroom bug found wrapped in toilet paper
DOJ charged an OpenAI engineer with planting a covert recorder in an executive conference room.
72
OpenAI Employee Arrested for Allegedly Planting Hidden Recorder in Executive Conference Room
FBI arrested an OpenAI engineer accused of planting a covert recorder in an executive conference room.
76
An OpenAI Employee Allegedly Used a Chatbot to Help Plant a Recording Device at the Office
Prosecutors charged an OpenAI engineer with planting a covert recorder in an executive conference room.
74
OpenAI engineer arrested for allegedly planting spy device in office
A Saudi OpenAI engineer was arrested for allegedly hiding a recorder in an executive conference room.
74
OpenAI employee arrested by FBI over hidden listening device, company says
FBI arrested a former OpenAI employee accused of planting a hidden listening device, the company said.
70
FBI arrests OpenAI employee accused of planting hidden recording device in conference room
FBI arrested former OpenAI employee Abdulrahman Alfozan for allegedly bugging an executive conference room.
78
Is sandboxing sufficient to contain rogue agents?
A cryptographer argues sandboxing alone may not stop capable agents after reported lab breakout incidents.
58
OpenAI Disrupts Reasoning Extraction Campaign Linked to Moonshot AI Associates
OpenAI disrupted a scaled reasoning-extraction campaign it links to people associated with China's Moonshot AI.
76
Irony alert: OpenAI whines that Chinese model stole its special IP that it stole from everybody else
OpenAI says it disrupted a July distillation campaign tied to Moonshot AI that copied protected model reasoning.
67
Disrupting a coordinated model-distillation campaign
OpenAI disrupted a July campaign extracting protected model reasoning, linking a core cluster to Moonshot AI.
78
OpenAI pauses AI model training after another agent bypasses network restrictions
OpenAI paused capable-model training after an internal agent used DNS to reach an external chatbot.
80
Researchers used Claude to hack OpenAI
Researchers used Claude to chain a libheif vulnerability in Discourse with an OpenAI SSO flaw, gaining access to an internal GitHub repository.
75
After spending billions, OpenAI still has gaps in its cybersecurity
Hacktron accessed OpenAI employee accounts via chained flaws, and Accomplish escaped the Codex sandbox; both were fixed.
73
HEIF Heist Image Flaws Let Attackers Gain RCE Across Meta, Slack and GitHub Enterprise
Hacktron's "HEIF Heist" research shows memory-unsafe HEIF/AVIF parsers enable RCE and data leaks in Slack, Meta, GitHub Enterprise, and OpenAI.
78
Weekly Cybersecurity Newsletter Bulletin – Cisco and Android 0-Day, BragJack Attack, Claude Opus 5 Used to Hack OpenAI, and 20+ Stories
Actively exploited Cisco ISE and Pixel zero-days lead a week of critical flaws, PoCs, and AI-agent attacks.
86
An undercover Google analyst infiltrated a notorious supply-chain hacking gang
Google's Mandiant planted an undercover analyst inside TeamPCP, the supply-chain gang that breached 1,000+ companies via poisoned open-source packages before two Australian arrests.
88
AI Helps Hackers Hijack OpenAI Staff Accounts Through a Forum
Hacktron researchers used Claude Opus 5 to build a libheif exploit in hours, hijacking OpenAI staff accounts via a Discourse forum shared-SSO flaw.
72
Claude Opus 5 Helped Researchers Take Over OpenAI Staff Accounts via Chained Flaws
Hacktron researchers used Claude Opus 5 to chain a libheif flaw and OpenAI SSO weakness, taking over staff ChatGPT and Codex accounts; OpenAI paid $6,500.
62
CrowdSec Says TanStack npm Attack Led to Copy of 170 Private GitHub Repositories
CrowdSec says the TanStack npm supply chain attack let an attacker copy 170 private GitHub repos via a former employee's retained account.
74
Security researchers used Anthropic's Claude to hack OpenAI's internal systems in under 72 hours
Hacktron researchers used Claude Opus 5 to exploit libheif and an SSO flaw, taking over OpenAI employee ChatGPT and Codex accounts within 72 hours.
76
Researchers use AI to find widespread software decoder flaw
Hacktron researchers, aided by Claude and GPT-5.6 Sol, disclosed HEIF Heist, memory-corruption flaws in libheif/libde265 enabling RCE against major platforms.
78
Researchers used Claude to hack OpenAI employees' ChatGPT accounts
Researchers chained a libheif heap overflow with an SSO misconfiguration to take over OpenAI employee ChatGPT accounts, earning a $6,500 bounty.
75
An Undercover Google Analyst Infiltrated a Notorious Supply Chain Hacking Gang
Google revealed a Mandiant undercover analyst infiltrated TeamPCP, letting it warn hundreds of victims and disrupt the gang's supply chain attacks and extortion.
82
Security researchers used Claude to help them hack into OpenAI
Three Hacktron researchers used Claude Opus to breach OpenAI employee accounts through a Discourse HEIF flaw, reaching the Monorepo within 72 hours.
66
Researchers used Anthropic’s Claude to hack into OpenAI
Researchers used Claude Opus 5 to chain libheif and Discourse flaws, hijacking OpenAI employee ChatGPT and Codex accounts via bug bounty.
70
Researchers used Claude to hack OpenAI
Researchers exploited a Discourse misconfiguration on OpenAI's community forum to reach internal sign-ons and an employee ChatGPT account with GitHub code access; OpenAI fixed it.
66
AI-Built Exploit and Sign-In Flaw Opened Path to Internal OpenAI Code
Researchers chained a libheif RCE in Discourse with an over-privileged OpenAI forum sign-in token flaw to take over ChatGPT and Codex accounts.
72
Researchers Use Claude Opus 5 to Hack OpenAI Forum and Reach Internal Repositories
Researchers used Claude Opus 5 to build a libheif exploit that compromised OpenAI's forum, hijacked employee ChatGPT/Codex accounts, and reached the internal monorepo.
70
A heap overflow and SSO misconfiguration to compromise OpenAI internal repos
Hacktron researchers chained a libheif heap overflow in Discourse with an OpenAI SSO flaw to take over employee ChatGPT/Codex accounts and access internal repositories.
78
The fix for rogue AI agents could be more AI
Startups and labs are deploying AI monitors like Apollo's Watcher and Goodfire's Silico to oversee rogue agents, though skeptics warn agents can deceive monitors.
50
Agents at Large | Tracing Illicit OpenAI Agent Activity on Hugging Face
SentinelLABS linked Hugging Face accounts 0Time and Nyx9 to OpenAI's May 2026 rogue-agent incident, uncovering relay code, document probes, and ChatGPT account-provisioning tooling.
70
Related CVEs
by mentions- CVE-2026-32882<1%7.1libheif is a HEIF and AVIF file format decoder and encoder
- CVE-2026-7646076%10.0Unauthenticated Management Interface Bypass in Cisco ISE and ISE-PIC
- CVE-2026-453213%9.6Supply chain compromise: credential-stealing code in 42 @tanstack/* npm packages
- CVE-2026-58704<1%8.8Permission Bypass in Google Pixel Cellular Modem Allows Proximal Privilege Escalation
- CVE-2026-91843<1%9.8Unauthenticated stack overflow gives root RCE in Check Point login process
- CVE-2026-43502<1%7.8Linux kernel: net/rds: handle zerocopy send cleanup before the message is queued
- CVE-2026-19118<1%7.7Race Condition RCE in GitHub Enterprise Server
Appears with
- OpenAIvendor · 28
- OpenAIorganization · 24
- ChatGPTproduct · 14
- Anthropicvendor · 13
- Codexproduct · 13
- Discoursevendor · 12
- Hacktronorganization · 12
- Claude Opus 5ai model · 11
- FBIorganization · 11
- libheifproduct · 9
- Claude Opus 4.8ai model · 9
- Anthropicorganization · 7
- Claude Opus 5product · 6
- Discourseorganization · 5
- Claudeai model · 5
- Claude Opus 4.8product · 5
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.