ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

Search: “Codex”

279 stories

Searchkeywordsmart Sortlatesthotimportancerelevance
DomainAllCyberAIWindow24h3d7d30dAllIn the wildImportant onlyShow duplicates
CategoryAllVulnerability 65AI industry 42AI safety & security 32Exploit / PoC 29AI tools & infra 23Malware 19AI research 14Model release 14Threat actor 13Ransomware 10Industry 8Data breach 6Policy & legal 6Research 5
SeverityAllcritical 64high 45medium 65low 12info 114

OpenAI fought dirty on career-making math problem, says NYU mathematician

NYU mathematician Tristan Buckmaster alleges OpenAI learned of his team's Navier-Stokes approach and raced ahead using massive compute to claim a full proof first.

NYU mathematics professor Tristan Buckmaster and Anthropic mathematician Levent Alpöge announced preliminary proofs toward the Navier-Stokes existence and smoothness problem, a $1 million Clay Millennium Prize problem, developed using OpenAI's Codex and Claude. They allege OpenAI learned of their progress and that an OpenAI team then used an 'insane amount of compute' to announce a full proof first. OpenAI research lead Sebastian Bubeck denies the claims as 'false and inflammatory'. Buckmaster also raised concerns that OpenAI could have learned from his Codex interactions, which the company may use for model training.

TechCrunch · AI · 7d agoAI industry

China-Based Artificial Intelligence Companies Conducting Industrial-Scale Distillation Campaigns Against U.S. AI Companies

NSA, CISA, and FBI warn DeepSeek, Alibaba, and other Chinese AI firms ran industrial-scale distillation of U.S. frontier models, threatening U.S. AI leadership.

A joint NSA, CISA, and FBI Cybersecurity Advisory (AA26-251A) says China-based firms DeepSeek, Moonshot AI, Alibaba, MiniMax, StepFun, and Z.AI extracted billions of tokens from U.S. frontier models including Claude, GPT, Gemini, and Grok, likely with Chinese government knowledge. Campaigns running since at least late 2024 used native APIs, cloud providers, third-party aggregators, gray-market proxy "transfer stations", and shared premium subscriptions to bypass geographic restrictions, evade safeguards, and violate providers' terms of use. The agencies recommend detecting anomalous prompts, accounts, and usage patterns; subtly altering responses to suspected distillers; and cross-organization intelligence sharing. They also call DeepSeek's publicly cited $5.6M training cost misleading because it excludes data acquired through distillation.

CISA Advisories · 8d agoAdvisory in the wild1

Amazon Kiro Prompt Injection Can Exfiltrate Sensitive Data Through Kiro Powers

Mindgard found a prompt injection flaw in Amazon Kiro IDE letting attacker-controlled workspace files exfiltrate sensitive local data; fixed in version 0.8.140.

Mindgard disclosed a prompt injection flaw in Amazon Kiro, an agentic AI IDE, that lets attacker-controlled repository content steer the agent into exfiltrating sensitive workspace data through Kiro Powers, which bundles MCP server configurations, POWER.md steering files, hooks, and contextual knowledge. Exploitation requires the user to open a malicious project via a workspace file and send any message to the agent; difficulty is rated low and it works in both trusted and untrusted workspaces. Amazon fixed the issue in Kiro IDE 0.8.140; the flaw has no CVE identifier and follows earlier Kiro bugs including CVE-2026-10591, plus related prompt-injection and code-execution issues in Codex CLI, Cursor, Gemini CLI, Copilot CLI, and Claude Code.

The Hacker News · 18d agoAI safety & securityCVE-2026-10591CVE-2026-35603CVE-2026-257251

PentestGPT: Open-source automated penetration testing agentic framework

Open-source PentestGPT runs autonomous LLM-driven penetration tests via Claude Code and Codex, with legacy human-in-the-loop mode supporting many providers.

PentestGPT, originally published at USENIX Security 2024 by Gelei Deng and colleagues, is an open-source framework that lets a large language model autonomously run penetration testing stages (recon, exploit, walkthrough) with no human in the loop, driving Claude Code or Codex CLIs. A legacy interactive mode uses three cooperating LLM sessions maintaining a Pentesting Task Tree and supports OpenAI, Anthropic, Google Gemini, DeepSeek, xAI, Qwen, Moonshot, and local models via Ollama. The tool sends anonymous telemetry to Langfuse by default, excluding command outputs, credentials, and flags, and is available free on GitHub.

Help Net Security · Aug 12, 2026Tools1

When the Whole Company Adopts AI: What It Does to Your SOC

Analysis of 16.9 million SOC alerts finds AI-related alerts at 0.43%, growing 685% since February, with 94.1% noise and 0.02% real attacks.

A review of roughly 16.9 million SOC alerts found about 73,000 (0.43%) were AI-related, a share that grew 685% between February and June 2026. Of AI-related alerts, 94.1% were noise, 5.8% genuine risks, and 0.02% real attacks; 79.8% received benign verdicts, 81.7% were automatically suppressed, and only 5.4% reached a human analyst. The only confirmed attacks were phishing campaigns that weaponized AI brand names as lures, while developer coding agents spawning shells and reading credential stores routinely tripped detections written before AI agents existed.

The Hacker News · 4d agoResearch1

Akeyless adds real-time enforcement for AI agents in production

Akeyless launches Agentic Runtime Authority, enforcing real-time intent-based access control on AI agent actions, with integrations for Claude Enterprise, OpenAI Codex and Amazon Bedrock AgentCore

Akeyless announced general availability of Agentic Runtime Authority, a real-time identity control layer that evaluates AI agent actions and blocks policy-violating actions before execution, layered on top of its SecretlessAI credential brokering. New integrations cover Claude Enterprise, OpenAI Codex and Amazon Bedrock AgentCore, alongside an Agentic Access Dashboard with session kill switches and event forwarding to Splunk, Datadog and Microsoft Sentinel. The vendor's platform already secures over 220 billion machine identity interactions for Fortune 500 organizations.

Help Net Securityupdated · 5d agofirst · 6d agoTools 2 sources1

Ask HN: Anyone still coding like 2021? Where do you work?

Hacker News users debate coding without LLMs, with one developer fired for refusing AI tools and others describing daily hand-coding practice to counter skill atrophy.

An Ask HN thread collects experiences of developers who still write code without LLM assistance. One contributor says he was fired for political reasons after refusing to use LLMs despite adequate stated performance, and observes fewer job ads now require LLM use. Others describe starting each day with a LeetCode problem or 30-60 minutes of hand-coding to stay sharp, contractual bans on AI-generated code for a government-adjacent embedded product over unresolved copyright issues, and inconsistent corporate policies where ChatGPT or Codex use flip-flops between allowed and blocked while a CIO mandates 70-80% AI-generated code next year.

Hacker News · AI · 6d agoAI industryHN 47↑ · 54 comments2

I tested 10 model/harness combinations on the same Three.js task

A developer benchmarked 10 model/harness combinations on a Three.js task; Qwen 3.8 27B on OpenCode scored 95.64% fastest at 8m48s.

The author ran an identical Three.js sci-fi hangar build prompt across 10 model/harness combinations and recorded score, tokens, durations, and tool errors. Qwen 3.8 27B x-high on OpenCode achieved 95.64% in 8m48s, the best fast result, while GLM 5.3 Flash Max on OpenCode scored highest at 96.89% in 20m28s. Other runs included GLM 5.3 Flash, Luna 5.6, SOL 5.6, and Astra 6.0 across Codex Open, OMP Open, OpenCode, DSH, and PTC harnesses, with scores ranging from 78.54% to 96.89%.

Hacker News · AI · 8d agoAI researchHN 104↑ · 61 comments

Hunting Vulnerabilities Using Frontier Models

Okta used frontier AI models GPT-5.5 Cyber and Mythos via OpenAI and Anthropic programs to scan millions of code lines for vulnerabilities.

Okta describes using frontier AI models, including GPT-5.5 Cyber Preview (TAC) and Mythos Preview, through OpenAI's Daybreak Cyber Partner Program and Anthropic's Project Glasswing to hunt vulnerabilities across its product codebase. The team built a custom Python orchestrator with strong isolation, vendor-agnostic model support, and four distinct scanning pipelines executed as isolated Codex or Claude Code sessions with progressive context loading to reduce context bloat. Human experts and AI agents worked both autonomously and in paired hunts, and Okta reports the best results when humans and agents taught each other.

Okta Security · 8d agoResearch

Using Blender with coding agents on macOS

Simon Willison demonstrates driving the Blender macOS app with ChatGPT Codex coding agents to render scenes via Python, costing roughly $4.24 at API rates.

Willison documents installing the full Blender application from blender.org and using ChatGPT Codex on macOS to render a pelican-riding-a-bicycle scene through Blender's Python API. He refined the output with follow-up prompts. AgentsView estimated the equivalent API cost at $4.24 for gpt-6-astra.

Simon Willison · 10d agoAI tools & infra1

OpenAI targets small utilities with $1 billion cyber defense initiative

OpenAI commits $1 billion to Daybreak for Frontline Defenders, subsidizing frontier cyber AI access and training for small utilities, governments, and critical infrastructure operators.

OpenAI President Greg Brockman announced Daybreak for Frontline Defenders, a $1 billion global commitment expanding subsidized access to Daybreak cyber models, training, and technical support. Daybreak for America will target small water and electricity providers, local governments, and banks, including a pilot with the MS-ISAC for state, local, tribal, and territorial defenders. The Daybreak Defense Network brings more than 35 enterprise partner products into the program, and attendees at OpenAI's utility summit represent 40 states serving over half the US population. Security experts welcomed the effort but cautioned that OT environments still need human-led implementation and testing before AI tooling can be safely rolled out.

CSO Online · 12d agoAI industry1

Understanding ChatGPT Work

Simon Willison dissects OpenAI's ChatGPT Work, explaining it is actually two products: a cloud agent and a local desktop variant descended from Codex.

OpenAI launched ChatGPT Work on July 9 and has iterated on it heavily since. Willison explains the product's confusing split architecture: a cloud version accessible via chatgpt.com and mobile apps, and a local version available through the ChatGPT desktop app (formerly Codex) that can access files and run programs directly on a user's computer. He describes the product as powerful but extraordinarily confusing, with the local variant feeling like Codex re-skinned.

Simon Willison · 16d agoAI industry

ChatGPT advanced account security adds passkeys and hardware keys

OpenAI launches Advanced Account Security for ChatGPT and Codex, replacing passwords with passkeys or hardware keys and disabling email/SMS recovery.

The opt-in setting disables password sign-in plus email and SMS account recovery for ChatGPT and Codex accounts, allowing only passkeys, hardware security keys, and user-held recovery keys, with shortened sessions and automatic exclusion of enrolled accounts' conversations from model training. OpenAI partnered with Yubico to offer discounted bundles of the YubiKey C Nano and C NFC, while any FIDO2/WebAuthn-compliant key or software passkey is supported, mirroring standards adopted by Google, Microsoft, and GitHub. Individual members of Trusted Access for Cyber using the most permissive models must enable the setting from June 1, 2026, or their organizations can attest to phishing-resistant authentication in their single sign-on.

Help Net Security · 23d agoAI industry

AI labs have a data trust problem that their policies haven't solved

Nvidia, Palantir, and Booz Allen restrict Anthropic's Fable over data-retention distrust, exposing gaps in AI labs' customer data policies.

Nvidia limits Anthropic's Fable to non-sensitive work and runs its own Nemotron models for internal tasks, while Palantir blocks Fable deployment until Anthropic grants irrevocable zero-data-retention guarantees, and Booz Allen bans it for proprietary cybersecurity work. John Schulman and researcher Sarah Hooker explain that labs can still extract customer IP from metadata, user traces, and synthetic data even under zero data retention. The trust crisis crystallized around Tristan Buckmaster's accusation that OpenAI's Codex absorbed his Navier-Stokes drafts, though OpenAI later stated his prompts could not have influenced its model.

The Decoder · 19h agoAI industry

OpenAI just wants to win

OpenAI says roughly 10,000 agents and tens of millions in compute solved the Navier-Stokes Millennium Prize problem in 88 hours, amid controversy.

OpenAI claims an advanced unreleased model, run with about 10,000 agents and tens of millions of dollars of compute for 88 hours, produced a solution to the Navier-Stokes problem, one of seven $1 million Millennium Prize problems set by the Clay Mathematics Institute in 2000. NYU professor Tristan Buckmaster, who was pursuing the problem with Anthropic researcher Levent Alpöge, accused OpenAI of racing his team and of possibly benefiting from his Codex prompts; OpenAI categorically denied both. OpenAI researcher Sébastien Bubeck acknowledged offering Buckmaster compute and authorship arrangements, which Buckmaster characterized as a bribe, while many mathematicians expressed unease at OpenAI's competitive conduct.

The Verge · AI · 4d agoAI industry1

Rapidly scaling online storage to serve over 1 billion ChatGPT users

OpenAI's Habitat online storage platform now handles over 70 million requests per second and 500 PB of data for 1 billion users.

OpenAI details the evolution of Habitat, its online storage platform backing ChatGPT and other products, which began in mid-2024 as a Python client-side library over Azure Cosmos DB. Habitat now processes more than 70 million requests per second, serves over 500 petabytes of data across nearly 40 geographic regions, and supports over 1 billion users weekly. By mid-2025 the client library approach became brittle, so OpenAI moved Habitat into a standalone service to centralize deployments, observability, and multi-tenancy reliability. This is part one of a two-part series; a future post will cover read optimization and scaling the Azure Cosmos DB partnership.

OpenAI News · 5d agoAI tools & infra1

Build more natural voice experiences with GPT‑Live‑1 in the API

OpenAI releases GPT-Live-1 in the API, a full-duplex voice model that handles interruptions natively and delegates reasoning to backend models.

OpenAI launched GPT-Live-1 in the API, a single-model full-duplex voice system that listens and speaks simultaneously, replacing chained STT-LLM-TTS architectures. It improves Full Duplex Bench performance by 30 percentage points over GPT-Realtime-2.1 and ranks #1 on Tau3 when paired with GPT-6 Astra at medium reasoning effort. Early partner Speak reported nearly 80% fewer interruptions in language tutoring. The API release costs $0.05 per minute for the front-end voice layer and supports telephony, native ASR transcripts, keyword biasing, and expanded voice and language options.

OpenAI Newsupdated · 3d agofirst · 6d agoModel release 10 sources1

.blend URL Viewer

Simon Willison demos a .blend URL viewer built with GPT-6 Astra in Codex and ChatGPT Images 2.5 generating Blender models.

Simon Willison used ChatGPT Images 2.5 to generate a Faberge egg concept image themed after the TV show Pluribus, then had Codex running GPT-6 Astra (high) execute a Blender local skill to build a 3D model from it. He published the result as a .blend URL viewer tool and continues experimenting with agentic Blender workflows. The post is a hands-on demo of AI-driven creative tooling rather than a security or release announcement.

Simon Willison · 6d agoAI tools & infra

Drama swirls around OpenAI’s legendary mathematical milestone

OpenAI claims an internal AI model solved the 90-year-old Navier-Stokes problem, sparking a priority dispute with mathematician Tristan Buckmaster.

OpenAI announced a solution to the Navier-Stokes problem, one of the $1 million Millennium Prize Problems, using an internal AI model it says outperforms the newly released GPT-6 Astra alongside 10,000 concurrent agents. NYU professor Tristan Buckmaster, who with Anthropic researcher Levent Alpöge published related findings a day earlier, questioned whether OpenAI accessed drafts from his Codex sessions. OpenAI says no specific user data was accessed, though it cannot rule out that de-identified usage data helped improve its models.

The Verge · AI · 7d agoAI industry1

How GPT-5.6 Sol helps run quantum computing experiments

OpenAI describes an MIT researcher using GPT-5.6 Sol with Codex to autonomously run and calibrate quantum computing experiments.

OpenAI published a case study showing how an MIT researcher uses GPT-5.6 Sol together with Codex to autonomously run quantum computing experiments, analyze results, and calibrate qubits. The post is a product application story rather than a new benchmark, paper, or model release.

OpenAI News · 7d agoAI industry1

How well do agents use test/verification techniques?

Dan Luu's eval finds coding-agent testing instructions (TDD, formal methods, PBT, skills) mostly fail to beat defaults on Zstd implementation correctness.

The author ran 26 prompt conditions plus 4 skills on a Zstd-in-Rust implementation eval using codex with GPT-5.6, testing TDD, fuzzing, property-based testing, formal methods (Lean 4, TLA+, Verus, Kani, SMT solvers) and community skills. Nothing dramatically outperformed the default no-instruction condition, which did above average; at xhigh effort, fuzzing and PBT conditions did slightly better than formal methods. Pre-registered predictions included TDD underperforming and popular test skills (ECC, Hegel, Trail of Bits) not outperforming. Results are averages of 80 runs per condition plotted against cost.

Hacker News · security · 8d agoAI researchHN 131↑ · 50 comments

[AINews] GPT-6 Astra: OpenAI’s biggest LLM launch of all time

OpenAI launched GPT-6 Astra, its new flagship model, claiming state-of-the-art computer use, software engineering, math, and cybersecurity capabilities.

OpenAI launched GPT-6 Astra as its new flagship model, describing it as its most intelligent and aligned model with state-of-the-art computer use, software engineering, and math/science capabilities. Pricing is $10/$50 per 1M input/output tokens standard ($20/$100 fast tier), rolling out first to limited organizations, then ChatGPT Plus/Pro/Business/Enterprise, the API, and AWS. OpenAI claims 99.9% on ARC-AGI-3, 98% on FrontierMath Tier 4, and 100% on ExploitBench. Artificial Analysis scored Astra 67 on the Coding Agent Index and 61 on the Intelligence Index, behind Claude Fable 5.1, and the system card drew attention for reporting decreased chain-of-thought monitorability despite alignment gains.

Latent Space · 12d agoModel release3

How law firm Gilbert + Tobin governs and scales AI with OpenAI

OpenAI details how law firm Gilbert + Tobin scales ChatGPT Enterprise and Codex firm-wide under CEO-led governance with human accountability.

OpenAI published a customer story describing Gilbert + Tobin's adoption of ChatGPT Enterprise and Codex across the law firm. The firm pairs executive-level commitment with formal governance and human accountability to expand AI use in legal workflows. The piece is a promotional case study, with no new product capabilities or research announced.

OpenAI News · 15d agoAI industry1

Polimill builds Japan's next-generation public AI infrastructure

OpenAI says Japanese company Polimill uses GPT models and Codex to give municipalities searchable access to administrative knowledge.

OpenAI published a customer story describing how Polimill, a Japanese civic technology company, builds public AI infrastructure using OpenAI GPT models and Codex. The tools let municipalities search and reuse administrative knowledge and are intended to accelerate internal development workflows.

OpenAI News · 16d agoAI industry

The Evolution of the Agent Harness

Latent Space essay argues late-2025 agent gains came from models and harnesses maturing together, with harness logic absorbed into model weights.

The piece defines the agent harness as everything beyond model weights—tools, context, memory, guardrails—and charts its evolution from ReAct prompting (October 2022) through AutoGPT's premature autonomy, Cursor/Copilot's human-in-the-loop retreat, and Devin's roughly 15% success rate, to o1's capability overhang and Claude Code's February 2025 terminal agent with permission rules. It argues the Christmas 2025 jump cited by Transformer co-inventor Lukasz Kaiser reflected model and harness curves crossing, and that remaining harnesses will serve human attention rather than the model.

Latent Space · 25d agoAI tools & infra

Stampli cuts launch hours by 68% using ChatGPT Work

AP automation firm Stampli used OpenAI Codex and ChatGPT Work to cut product launch production hours by 68%.

Stampli, an accounts-payable automation company, compressed weeks of launch production into days using Codex and ChatGPT Work. Facing a fixed deadline with design resources committed elsewhere, the team reported a 68% reduction in launch hours. The piece is an OpenAI customer adoption case study.

OpenAI News · 27d agoAI industry

Import AI 469: Science AI; RSI simulator; and Zuck's technological pessimism

New DiG-bench benchmark of 70 hidden-rule games shows only Opus 5 and Fable 5 solving the hardest tiers, probing AI discovery and creativity.

Import AI 469 highlights DiG-bench (Discovery in Games), a benchmark of 70 handcrafted games with hidden rules and objectives where only 21 games are public and most are kept private to avoid training contamination. Only Opus 5 and Fable 5 with Claude Code solved any Tier 7 tasks (about 0.2 success), with GPT-5.5 next; the games are text-based and have beaten every human tester at least once. The newsletter also covers an RSI simulator game by Paradigm Research and Inherent's Faraday, a post-trained open-weight model that supervises frontier models to improve scientific research output.

Import AI · Aug 17, 2026AI research

Hazmat: Open-source containment for AI agents

Open-source tool Hazmat runs AI coding agents like Claude Code and Codex in a dedicated account, restricting access to credentials and files.

Hazmat is a free open-source containment tool that launches AI coding agents, including Claude Code, Codex, OpenCode and Cursor Agent, under a separate local account, sharing only a chosen project directory and enforcing per-session sandbox policies, network rules, and optional backups. On macOS it backs up the project, builds a session-specific sandbox policy, and starts the harness behind a firewall rule; Linux runs natively and an Apple-container backend is experimental. About 5.5% of the code is a TLA+ formal specification of its containment model.

Help Net Security · Aug 17, 2026AI safety & security1

From assistance to execution: How enterprises put AI to work

OpenAI reports enterprise adoption patterns of agentic AI through ChatGPT and Codex, with frontier firms pulling ahead in deployment.

OpenAI published a report on how enterprises are moving from AI assistance to autonomous execution, focusing on agentic AI deployments. It highlights the use of ChatGPT and Codex in enterprise workflows and argues that frontier firms are pulling ahead of peers in AI adoption. The piece is adoption research and marketing rather than a security disclosure.

OpenAI News · Aug 12, 2026AI industry1

How RingCentral builds AI-native work from engineering to ops

OpenAI's case study describes RingCentral using ChatGPT Work and Codex to accelerate AI product development and centralize operational intelligence across engineering and operations.

OpenAI published a customer story on RingCentral's adoption of ChatGPT Work and Codex. RingCentral reportedly uses the tools to speed up AI product development and centralize operational intelligence across engineering and operations. The post is promotional rather than technical and describes no security incidents.

OpenAI News · Aug 12, 2026AI industry