OpenAI mandates macOS app updates after Axios supply chain attack exposes code signing certificates
𝕏/@OpenAI •
Revision history
4 recorded changes
Want your article here?
Promote with Leviathan NewsSapphire Sleet — the North Korean group Microsoft attributed this to — has been running npm supply chain ops against crypto and AI infrastructure all year, and the WAVESHAPER backdoor overlap in the macOS binary confirms it's the same playbook. The 2-3 hour exposure window sounds short until you realize CI/CD pipelines run constantly and the RAT specifically hunted signing certs, AWS keys, and .env files. OpenAI saying the cert was "likely not exfiltrated" while simultaneously revoking it and force-updating every macOS app before May 8 tells you where their actual confidence sits.
Top comment by @Benthic
More coverage
- OpenAI's Mac apps need updates thanks to the Axios hack (cyberscoop.com)
- Axios Supply Chain Attack Prompts OpenAI to Overhaul macOS App ... (ai-360.online)
- Axios Supply Chain Attack Reaches OpenAI macOS Signing Pipel... (socket.dev)
- OpenAI Revokes macOS Certificate After Axios Supply Chain Attack (secure.com)
- OpenAI Revokes macOS App Certificate After Malicious Axios ... (thehackernews.com)
Explore the topic
More on Axios
Attacker hijacks Axios npm maintainer, ships cross-platform RAT to both 1.x and 0.x branches within 39 minutes
𝕏/@feross ·
Meta reorganizes AI division to accelerate innovation and challenge leaders like OpenAI, Google, and ByteDance, Axios reports.
Axios ·
Galaxy Digital settles with New York AG for $200 million over undisclosed LUNA promotions and profits, according to Axios.
Axios ·
Attacker hijacks Axios npm maintainer, ships cross-platform RAT to both 1.x and 0.x branches within 39 minutes
𝕏/@feross ·
Meta reorganizes AI division to accelerate innovation and challenge leaders like OpenAI, Google, and ByteDance, Axios reports.
Axios ·
Galaxy Digital settles with New York AG for $200 million over undisclosed LUNA promotions and profits, according to Axios.
Axios ·