TLDR Tech / IT
OpenAI patches a third-party supply-chain scare
OpenAI said it found a security issue tied to the Axios developer library after a compromised GitHub Actions workflow touched certificate and notarization material used for its macOS apps. The company said there is no evidence user data, API keys, IP, or software were compromised, but it is forcing users onto newer macOS app versions and tightening its signing pipeline.
Read the full story