Anabelle Colaco
14 Apr 2026, 09:04 GMT+10
SAN FRANCISCO, U.S.: OpenAI said it had addressed a security issue linked to a third-party developer tool, adding that there was no evidence of user data exposure or compromise to its systems.
OpenAI said on Friday it had identified a security issue involving a third-party developer tool called Axios and is taking steps to protect the process that certifies its macOS applications are legitimate OpenAI apps.
The ChatGPT maker said it found no evidence that its user data was accessed, that its systems or intellectual property was compromised, or that its software was altered.
The company said it is updating its security certifications, requiring all macOS users to update their OpenAI apps to the latest versions to help prevent any risk of someone attempting to distribute a fake app.
According to OpenAI, Axios, a widely used third-party developer library, was compromised on March 31, as part of a broader software supply chain attack by actors believed to be linked to North Korea.
This attack led a GitHub Actions workflow used by OpenAI to download and execute a 'malicious' version of Axios. This workflow had access to a certificate and notarization material used for signing macOS applications, including ChatGPT Desktop, Codex, Codex-cli, and Atlas.
OpenAI said its analysis of the incident concluded that the signing certificate present in this workflow was likely not successfully exfiltrated by the 'malicious' payload.
Effective May 8, older versions of OpenAI's macOS desktop apps will no longer receive updates or support, and may not be functional, the ChatGPT maker said.
Passwords and OpenAI API keys were not affected by the third-party security issue, the company said, adding that the root cause of the security incident was a misconfiguration in the GitHub Actions workflow, which has been addressed.
Get a daily dose of Los Angeles Herald news through our daily email, its complimentary and keeps you fully up to date with world and business news as well.
Publish news of your business, community or sports group, personnel appointments, major event and more by submitting a news release to Los Angeles Herald.
More InformationLONDON, U.K.: Oil prices surged above US$100 a barrel on Monday as escalating tensions between the United States and Iran, including...
WASHINGTON, D.C.: In a setback to President Donald Trump, a federal judge dismissed his US$10 billion defamation lawsuit against the...
TEL AVIV< Israel (ANI) - Israel's Prime Minister Benjamin Netanyahu on Sunday (local time) visited southern Lebanon alongside senior...
JERUSALEM - Israel's far-right National Security Minister Itamar Ben-Gvir visited the Al-Aqsa Mosque compound in occupied East Jerusalem...
AUGUSTA, Ga. -- Jack Nicklaus, Nick Faldo, Tiger Woods and now Rory McIlroy. The Northern Irishman emerged from a tight pack of contenders...
ISLAMABAD, Pakistan: U.S. Vice President JD Vance said talks between the United States and Iran ended early on April 12 without a peace...
SAN FRANCISCO, U.S.: OpenAI said it had addressed a security issue linked to a third-party developer tool, adding that there was no...
LOS ANGELES/MONTREAL: Global supply chains are being reshaped as companies search for alternative shipping routes to bypass disruptions...
ALBUQUERQUE, New Mexico: Despite losing its status decades ago as one of the nation's main arteries, people from around the world still...
NEW YORK CITY, New York: U.S. lawmakers are calling for investigations into prediction market platform Polymarket after a series of...
NEW YORK CITY, New York: Amazon is expanding its push into healthcare by offering a new weight-loss pill from Eli Lilly through in-clinic...
LOS ANGELES, California: Jasveen Sangha, better known as the woman who sold actor Matthew Perry the ketamine that killed him in 2023,...
