{"id":3789,"date":"2026-11-04T10:03:48","date_gmt":"2026-11-04T05:03:48","guid":{"rendered":"https:\/\/ipp-news.com\/?p=3789"},"modified":"2026-11-04T10:03:48","modified_gmt":"2026-11-04T05:03:48","slug":"openai-faces-fresh-scrutiny-over-internal-security-risks","status":"publish","type":"post","link":"https:\/\/ipp-news.com\/?p=3789","title":{"rendered":"OpenAI faces fresh scrutiny over internal security risks"},"content":{"rendered":"
\n

When OpenAI disclosed in October that it found a recording device planted in an executive conference room<\/a>, several former employees had the same reaction \u2014 they were not surprised.<\/strong><\/p>\n

Even before OpenAI launched ChatGPT in late 2022, some company staffers raised concerns internally about its security practices, according to five people familiar with the matter.<\/p>\n

Employees shared their concerns with top OpenAI leaders \u200band the board of directors, the people said, adding that some staffers came away from those interactions concluding that management was more focused on keeping pace with competitors like Google and Anthropic than on security.<\/p>\n

These workers argued that OpenAI\u2019s controls were so lax \u200cthat outsiders, including foreign governments, could obtain sensitive information about the AI lab\u2019s technology with relative ease, the people said. For example, anybody at OpenAI who could access its code could see the technical details underlying many company projects.<\/p>\n

OpenAI has begun to shift strategy to address security issues, according to two people familiar with the matter.<\/p>\n

Thibault Sottiaux, a senior executive overseeing product development, has recently taken charge of an internal initiative to secure OpenAI\u2019s internal systems, they said.<\/p>\n

In August, Sottiaux, who goes by \u201cTibo,\u201d reassigned a quarter of OpenAI\u2019s production engineers to improve its security infrastructure, one of the people said.<\/p>\n

The internal warnings, including years of employee complaints to leadership about internal vulnerabilities, certain details of which have not been previously reported, shed light \u200bon a tension within the AI field.<\/p>\n

Since ChatGPT launched in late 2022, AI technology has become a strategic asset<\/a> for the US, putting pressure on American companies to protect their technology from foreign rivals.<\/p>\n

But adding security layers can also delay the process of advancing AI technology and possibly \u200bcomplicate OpenAI\u2019s and Anthropic\u2019s plans for massive initial public offerings that would make them among the most valuable companies in the world.<\/p>\n

Will DePue, a former OpenAI researcher who resigned from the company in April of this year, wrote in \u2060a post on X that with competition so tense, AI leaders \u201ccan\u2019t sacrifice velocity for security. It is more important to them to move fast than to be secure, even from our greatest national adversaries.\u201d<\/p>\n

When asked about employees\u2019 concerns and their view that management did not act on these issues, OpenAI spokesperson Elana Widmann \u200bsaid that OpenAI is one of the most targeted organisations in the world.<\/p>\n

As a result, the company invests heavily in its security program to protect against attacks from insiders, cybercriminals and nation-states, she said.<\/p>\n

\u201cProtecting our technology, data, and people is a responsibility we take seriously and a matter of national importance,\u201d Widmann said.<\/p>\n

\u201cThe \u200bactions we\u2019ve taken recently show that the program is doing its job: identifying risks and responding decisively. We\u2019ll keep strengthening our defences as technology and threats evolve.\u201d<\/p>\n

<\/a>Research widely available<\/strong><\/h3>\n

On October 13, the Justice Department said US federal agents arrested a Saudi national and charged him with installing a hidden audio recording device, concealed in toilet paper, in an executive conference room.<\/p>\n

Abdulrahman Alfozan<\/a>, 35, was an OpenAI engineer at the time.<\/p>\n

Alfozan also used an AI tool meant for OpenAI employees to find internal documentation about executives visiting Saudi Arabia and which OpenAI officials were most likely to attend meetings with Saudi ministers, according to a court filing.<\/p>\n

Alfozan was in regular contact with a Saudi royal who tried to recruit him for a new AI \u200bventure launching in Saudi Arabia. Lawyers for Alfozan did not respond to a request for comment.<\/p>\n

Some employees have long been concerned about the wide availability of information within OpenAI, the five people familiar with OpenAI\u2019s practices said.<\/p>\n

Anybody at OpenAI who could access its code could also see the details underlying many of the \u200bcompany\u2019s projects, including sensitive ones unrelated to an employee\u2019s work.<\/p>\n

That is because OpenAI stored most of its code in a single repository, known in the industry as a \u201cmonorepo,\u201d the people said.<\/p>\n

The monorepo was dense and complicated, which may have deterred some would-be attackers in the past. Now, AI agents can sift through that amount of material.<\/p>\n

In \u200cthe past, OpenAI has \u2060kept much of its research documentation on GitHub and Slack, raising concerns among some employees that motivated actors could still find crucial information, the five people said. But one of the sources and OpenAI said the company has restricted access to sensitive work.<\/p>\n

OpenAI emphasised that much of its most sensitive work is held in separate code repositories with strict access controls.<\/p>\n

And it said the monorepo does not contain all of its code or critical details of the company\u2019s models, including the numerical values that determine how a model behaves, known as the model weights.<\/p>\n

Another issue is that OpenAI had not done regular security reviews of its internal tools, such as the so-called sandboxes where researchers stress-test new models, three people familiar with the company\u2019s practices said.<\/p>\n

Employees often modified those tools for their work, but those changes were not always tested for security problems, leaving them potentially vulnerable to attacks from outsiders, the three people said.<\/p>\n

The company said it has a strong approach \u200bto security under its chief information security officer, Dane Stuckey, who joined in \u200bOctober 2024. OpenAI said it now conducts regular security reviews of \u2060its internal tooling.<\/p>\n

<\/a>Open debate versus security<\/strong><\/h3>\n

OpenAI is not the only AI company to face security problems.<\/p>\n

In January, a federal jury in San Francisco convicted<\/a> a former Google employee who was arrested in March 2024 on charges of stealing thousands of pages of confidential information about Google\u2019s AI technology on behalf of China.<\/p>\n

In late October, a cybersecurity startup called Cathedral Systems said it hacked into Anthropic\u2019s systems and gained access to Slack channels where employees discussed sensitive model details.<\/p>\n

An Anthropic spokesperson said \u200bthe data accessed included some business contact information for customers and partners as well as a set of basic user account records. Cathedral\u2019s CEO did not respond to a request for comment.<\/p>\n

OpenAI and Anthropic have tried to \u200bmaintain a more open research culture to both \u2060attract employees and foster creativity that can lead to breakthroughs.<\/p>\n

The AI field is rooted in academia, where machine-learning scientists have openly discussed their research.<\/p>\n

Some OpenAI employees are increasingly worried about this approach as AI grows more capable, according to the five people.<\/p>\n

In 2023, Leopold Aschenbrenner, then an OpenAI researcher, wrote an internal memo titled \u201cOpenAI is China\u2019s leading AI lab\u201d about his concerns that China could infiltrate OpenAI and study its technology, three people familiar with the matter said.<\/p>\n

Aschenbrenner shared that memo with some board members later that year after an outsider hacked into OpenAI<\/a> and took details about its GPT-4 model.<\/p>\n

OpenAI said the hacker accessed only Slack channels available to the whole company.<\/p>\n

Security concerns \u2060within OpenAI flared up \u200bagain this summer when OpenAI agents being tested hacked into the AI company Hugging Face<\/a>, an incident that prompted scrutiny from state, local and federal officials, including the White House.<\/p>\n

Cybersecurity firm Hacktron \u200bAI said, opens new tab<\/a> three of its researchers used a rival AI model from Anthropic in July to break into ChatGPT accounts belonging to multiple OpenAI employees and gained access to some internal OpenAI systems, including its monorepo. The incident exposed how advanced AI can now put the AI companies themselves at risk of attack.<\/p>\n

OpenAI\u2019s Widmann said the company thanked the researchers for sharing their findings and that it \u200btook steps to minimise the risk of similar attacks in the future.<\/p>\n

After Reuters sought comment for this story, OpenAI said on Monday in a blog post that it is planning its \u201cnext internal security sprint\u201d to beef up its defences.<\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

When OpenAI disclosed in October that it found a recording device planted in an executive conference room, several former employees had the same reaction \u2014 they were not surprised. Even before OpenAI launched ChatGPT in late 2022, some company staffers raised concerns internally about its security practices, according to five people familiar with the matter. Employees shared their concerns with top OpenAI leaders \u200band the board of directors, the people said, adding that some staffers came away from those interactions concluding that management was more focused on keeping pace with…<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[19],"tags":[],"class_list":["post-3789","post","type-post","status-publish","format-standard","hentry","category-english"],"gutentor_comment":0,"_links":{"self":[{"href":"https:\/\/ipp-news.com\/index.php?rest_route=\/wp\/v2\/posts\/3789","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ipp-news.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ipp-news.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ipp-news.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/ipp-news.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=3789"}],"version-history":[{"count":0,"href":"https:\/\/ipp-news.com\/index.php?rest_route=\/wp\/v2\/posts\/3789\/revisions"}],"wp:attachment":[{"href":"https:\/\/ipp-news.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=3789"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ipp-news.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=3789"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ipp-news.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=3789"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}