OpenAI Details Third-Party Cyber Evaluations, Adds Safeguards
OpenAI addressed recent third-party cybersecurity evaluation incidents involving its models, outlining new safeguards to strengthen AI model testing and evaluation. The company aims to improve security protocols for external assessments.
Sources and evidence
Summary last validated Aug 19, 2026
Reader actions
Report an issue
Use this for an incorrect summary, wrong source, duplicate story, or wrong category. Submissions are private and do not change the story automatically.
Related coverage
- security
Microsoft urges early testing of post-quantum certificate ecosystems
Microsoft published guidance urging organizations to begin testing certificate ecosystems for post-quantum authentication now, highlighting its PQC TLS Pilot Program as a way to advance future readiness. The post appeared on the Microsoft Security Blog.
- industry
Oracle uses ChatGPT and Codex to speed recruiting, engineering, and operations workflows
OpenAI published a customer story describing how Oracle applies ChatGPT Work and Codex across recruiting, engineering, and operations. According to the post, Oracle uses these tools to turn specialist knowledge into fast, repeatable workflows, compressing tasks that previously took days into minutes.
- industry
LegalOn cuts Codex costs 65% with task-matched model routing
LegalOn reduced estimated daily Codex costs by 65% while maintaining development speed, according to OpenAI. The legal tech company matched its Astra, Sol, and Luna models to specific tasks and managed budgets strategically, cutting spend without slowing engineering output.
- industry
Pollo AI uses GPT-5.6, GPT-6 Astra, and GPT-Image-2.5 for ad creation
Pollo AI is using OpenAI's GPT-5.6, GPT-6 Astra, and GPT-Image-2.5 to help creators turn ideas into detailed images and cinematic video ads, according to OpenAI's blog. The post describes how the platform supports campaign creation from concept to finished creative.
- security
CISA: Chinese Government-linked Hackers Target US Critical Infrastructure
CISA published an advisory stating Chinese government-linked cyber threat actors, enabled by China-based Integrity Technology Group, combine automated scanning, botnets, and hands-on exploitation to steal sensitive data from organizations worldwide, including US critical infrastructure. Tactics include cross-site scripting and password spraying on Microsoft Exchange servers, VPN persistence, and email and credential exfiltration via scripts.