OpenAI says its models helped trace a hidden office recording device

We discovered a sophisticated recording device that was hidden inside one of our offices. We used our models to understand the device and where it had come from, identifying that a specific employee had planted it a few days earlier. We referred the matter to the FBI, and we’re grateful to the agents and prosecutors who moved quickly to make an arrest. The FBI’s investigation is ongoing and we will continue to support their work. At this time, we have no indications of this individual inappropriately accessing or exfiltrating model weights, source code, or customer data. The employee was terminated. We take protecting our technology, data, and people seriously, and as a matter of national importance. Our security program is designed to protect against a wide range of threat actors, from insider risks to cybercriminals to nation states, and this case is an example of how AI can help address these sophisticated security threats.

We made the first AI model you can have a realistic conversation with that was trained entirely on speech! Dessa is a full-duplex speech-to-speech model that you can run on consumer GPUs. This is a GPT3 moment for speech. https://t.co/XVD8sSyJn8

I spent last night watching my honeypot server get hit 14,000 times in six hours. And almost none of the traffic was human. I've been in security for over a decade, and I can tell you with full honesty that what's happening right now doesn't resemble anything I've worked through before. The shape of the threat has changed. When I started, we tracked attackers like weather systems like individual storms with a direction, a motive, and a human operator you could eventually name. These days I'm watching autonomous agents swarm login pages with the patience and discipline of machines, because that's what they are. The numbers coming out of October are the ones keeping me up. Cloudflare just absorbed a 4.2 terabit per second DDoS attack, the largest in recorded history. Ransomware incidents jumped 41% in a single month. In September, OpenAI-powered agents got caught attacking RubyGems, a package registry that quietly underpins a huge chunk of software I use every day. In July, roughly 700 AI agents coordinated an attack on Hugging Face's infrastructure as part of a single automated task. A Chinese threat actor was publicly caught running full attack chains through DeepSeek with no human at the keyboard. I keep rereading these reports because each one by itself would've been the biggest story of the year five years ago. Together, in one month, they're the new baseline. What I want people outside the industry to understand is why this specific moment feels like a hinge. For thirty years, the thing protecting most of us was simple economics. Attackers had to choose who to target because their time was finite. That ceiling is gone. An agent I can rent for pennies will try every leaked password you've ever used against every service you've ever signed up for, in parallel, overnight, and never get tired. The same math that made ChatGPT useful made opportunistic hacking infinite. The old assumption that you were "too boring to be a target" relied on scarcity that no longer exists. I'm not writing this to spiral anyone out. Most of this fight genuinely isn't yours to win. But the small things still matter more than people think. Tonight I'd switch your most important accounts like email, bank, primary cloud, etc. to passkeys or a hardware key. I'd kill SMS 2FA wherever an authenticator app is offered. I'd turn on breach alerts in whatever password manager you use. If you're in the US, I'd freeze my credit at all three bureaus, which is free and takes about ten minutes. None of that stops the swarm. It makes you a slightly worse target than the person next to you. In a month like this one, that's the whole game I'm playing too. @mattshumer_ has summed it beautifully. Drop everything and go give it a read. Nothing is more important than this article right now.

Announcing three major scientific discoveries, one each in mathematics (harmonic analysis), computer science (complexity theory), and physics (quantum field theory). AI starting to help us improve our understanding of the universe! https://t.co/VkfacopR2R

banned for reverse engineering work? that’s wild oh well, -$500, and a bunch of banked resets) but gained motivation to get 3 more machines and finish my cluster. i have never used openai to exploit or find vulnerabilities, only local reverse engineering which tripped daybreak. https://t.co/RDxWAP3Bfs

While evaluating Qwen3.8-Flash-Next in a controlled sandbox environment, Cohere's research team observed something unexpected. Asked to generate a defensive cybersecurity detection rule, the model instead inventoried aspects of the machine it was running on and attempted to upload a probe file to an Alibaba Cloud storage bucket in Beijing. Notably, the model's reasoning trace stated that it would not invoke any tools before taking these actions. Cohere's sandbox blocked the attempt, and no external communication succeeded. We have not determined the root cause, and we are not asserting malicious intent. But the incident raises important questions for organizations deploying agentic AI systems: Can models take actions that differ from their stated reasoning, and how should security teams evaluate trust, provenance, and behavior in open-weight models? We are publishing our findings because organizations making model adoption decisions deserve as much information as possible. We hope this contributes to greater transparency, stronger security practices, and continued collaboration across the AI ecosystem. Read the full report: https://t.co/TZSugXi2ZE

I designed all of these landing pages in the last two months, using @higgsfield , Claude, and Cursor with my custom AI designer skill. The skill is open source: https://t.co/Gs1RT1BZxi https://t.co/XhWtFFoLNu

BREAKING: China's AI stock bubble bursts, wiping out $480 billion in market value as its tech-heavy STAR50 index plunges 40% in under 4 months.

We're donating Agent Skills to the Agentic AI Foundation (@AgenticAIFdn), the same foundation we donated MCP to. Since December 2025, 70+ agent platforms have integrated the standard, including ChatGPT, Cursor, GitHub Copilot, and VS Code. Here's what that means for you:

Online AI detector says Declaration of Independence is 93.2% written by AI. https://t.co/bxKdiVPhI7

AI uses Cameras and Lidars to spot dangerous rock slopes. https://t.co/9Epvx23Kd1

software engineers are going to have to tackle a new set of problems to unlock powerful multiagent systems to solve the world's hardest problems - right now is one of the most interesting moments in history to be an engineer. https://t.co/YsQ0xta4KR

BREAKING NEWS 🚨: ChatGPT can now sell the stuff you don't use like a $60 per hour eBay reseller. Take one photo of anything you want gone and use these 7 prompts:

Introducing Jev @typesafeai powered people-search Just $0.0089/lead, No more $600 subscriptions, Try it at https://t.co/kU3IBHJqhb - 85% cheaper than Clay - #1 on people search bench accuracy - Plugin to any agent to find anyone Fully open source, 0% markup Git Repo below 👇