InfoSecBulletin Cybersecurity for mankind
OpenAI has shared details about a security issue linked to Axios, a popular third-party JavaScript library, which is part of a larger attack on software supply chains found on March 31, 2026.
The company stated in a news release that there is no proof that anyone accessed its user data, that its systems or ideas were harmed, or that its software was changed.
Citrix NetScaler SAML 0-Day Flaw Under Attack
Major Danish university breached, 200,000 users at risk
Microsoft’s X account hijacked to promote Clippy crypto scam
Critical cPanel, GitLab AI Gateway and Dell CSM Flaws Enable RCE And Admin Hijacking
Nearly 100,000 email addresses exposed in first AI-related data breach in Singapore
Hackers Exploit Zimbra Mail Servers: TeamViewer patched 5 critical flaws
Google Warns of Hackers Actively Exploiting Citrix 0-Day Flaws
CISA Warns Critical MikroTik RouterOS Flaw While Cisco SD-WAN Zero-Day Exploited in Attacks
Apple Zero-Day Exploited: Pentagon Data Breach Reportedly Exposes Sensitive Data of 3 Million People
JadePuffer Agentic AI targets and destroys Azure’s cloud resources
OpenAI is updating its security certificates. All macOS users must update their OpenAI apps to the newest versions. This will help keep users safe from anyone trying to share a fake app that looks like it’s from OpenAI.
What happened?
On March 31st, 2026, Axios was hacked in a larger software attack. OpenAI said that a workflow from GitHub Actions used for signing its macOS apps downloaded a bad version of Axios. This workflow had access to the digital certificate that confirms apps like ChatGPT Desktop and Codex really come from OpenAI.
The company said that its analysis concluded that the signing certificate was likely not successfully exfiltrated by the malicious payload. However, it’s still treating the certificate as compromised.
Older versions of macOS desktop apps will not get updates or help anymore and might not work after May 8th.If they succeed, threat actors could use the certificate to sign their own code, making it look like real OpenAI software.
“We have stopped new software notarizations using the old certificate, so new software signed with the old certificate by an unauthorized third party would be blocked by default by macOS security protections unless a user explicitly bypasses them,” the press release said.
The company said the flaw happened because of a misconfiguration in the GitHub Actions setup, which has now been fixed.
OpenAI said that passwords and API keys were safe. The web software was also safe. The issue only involved OpenAI apps for macOS.
