Skip to content
Threat Feed
Subscribe

Vendor

OpenAI

3 briefs RSS
high threat

OpenAI Compromised via TanStack Supply Chain Attack

OpenAI was impacted by the TanStack supply chain attack, resulting in two employee devices being compromised and the exfiltration of credential material from internal source code repositories.

macOS applications TeamPCP supply-chain credential-access npm pypi
2r 1t
high advisory

Malicious Hugging Face Repository Distributes Information Stealer

A malicious repository on Hugging Face, impersonating OpenAI's 'Privacy Filter' project, distributed information-stealing malware to Windows users by executing a PowerShell command that downloads and runs a Rust-based infostealer, which exfiltrates collected data to a command-and-control server.

Privacy Filter +3 huggingface infostealer malware supply-chain python powershell windows
2r 21t 1i
high advisory

Manipulation of Vision-Language Models via Imperceptible Image Perturbations

Cisco researchers discovered that attackers can manipulate vision-language models (VLMs) by using pixel-level perturbations in images to embed malicious instructions, which are unreadable by humans but interpreted by AI, leading to potential data exfiltration or other unauthorized actions.

GPT-4o +5 ai vlm perturbation defense-evasion ai-security
2r 1t