SesameOp malware uses OpenAI’s Assistants API as a covert command-and-control channel It enables persistent access, runs commands, and exfiltrates data via encrypted API traffic Microsoft urges ...

A security incident at OpenAI's vendor, Mixpanel, has led to the exposure of names and email addresses for some API account holders. OpenAI has confirmed a data breach involving its third-party ...

Microsoft uncovers a months-long campaign where threat actors used OpenAI’s legitimate API as a covert command-and-control channel, bypassing traditional detection methods. In a newly uncovered ...