Loading story…
OpenAI announced plans to acquire Promptfoo, positioning the deal as a way to strengthen security testing for AI agents and application workflows, alongside separate claims that its Codex Security capability identified 11,000 “high-impact” bugs in a month. The coverage frames these moves as part of a broader push toward automated, AI-assisted security validation in software development and DevSecOps, with an emphasis on scaling vulnerability discovery and testing as organizations adopt agentic AI.
Other items in the set are largely opinion/feature pieces or unrelated security-policy reporting rather than additional reporting on the OpenAI/Promptfoo transaction or Codex Security results. Notably, one article reports that CVE program funding was secured, easing concerns about continuity of the vulnerability identifier ecosystem, while several other references discuss general themes such as IAM strategy in the public sector, access-decision risk in identity security, OT/legacy industrial cyber risk, SOC preparation for agentic AI, and post-quantum cryptography (PQC) planning—useful context, but not the same specific event as the OpenAI acquisition or Codex Security claim.
Track how attackers are adapting to this technology.
2 events from the most recent confirmed update back to the earliest known activity.
CSO Online reported that OpenAI planned to acquire Promptfoo to strengthen security testing for AI agents. The reference does not include transaction terms or a more specific announcement date beyond publication timing.
A CSO Online item reported that OpenAI said its Codex Security tool identified 11,000 high-impact bugs over the course of one month. The reference provides only headline-level detail and does not specify the month or affected organizations.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
Follow how adversaries are adapting to this technology, and where it touches your stack today.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Citizen Lab highlighted concerns about **OpenAI’s Pentagon contract**, noting expert skepticism that bulk user-data collection can be effectively ruled out and warning that feeding commercially available personal data into *opaque AI systems* can amplify harm through errors, bias, and weak accountability. Separately, CSO Online reported on OpenAI’s security-related initiatives, including a claim that **Codex Security** identified **11,000 “high-impact” bugs** in a month and a report that OpenAI plans to **acquire Promptfoo** to strengthen **AI agent security testing**. Most other items in the set are **opinion/feature or promotional content** rather than incident-driven threat intelligence: CIO and CSO Online ran general enterprise AI and security management pieces (e.g., “shadow AI” governance, identity decisioning, OT/IoT/zero trust challenges, cloud security culture/process issues, and pen-test automation lessons learned), while Red Canary published an **RSAC 2026 session guide**. One CSO Online headline referenced a **critical HPE Aruba CX switch flaw** enabling admin control without credentials, but the provided text does not include details sufficient to confirm it as the same story as the OpenAI items and it appears as a sidebar link rather than the primary subject of the referenced pages.
Jun 29, 2026
OpenAI announced it is acquiring **Promptfoo**, an AI security startup focused on testing and hardening LLMs against adversarial abuse. OpenAI said Promptfoo’s technology will be integrated into *OpenAI Frontier* (its enterprise AI-agent platform) to support automated red-teaming, security evaluation of agentic workflows, and monitoring for risk and compliance, while continuing to develop Promptfoo’s open-source tooling. Separately, red-team startup **CodeWall** reported that its autonomous AI agent compromised McKinsey’s internal generative AI platform (*Lilli*) and obtained full read/write access to the chatbot environment within roughly two hours, without using credentials. CodeWall claimed access to large volumes of sensitive data in plaintext (including chat logs, files, user accounts, and system prompts), and emphasized that writable system prompts could enable response poisoning and manipulation of outputs at scale—highlighting how agentic AI can be used to accelerate intrusions and why enterprises are prioritizing agent security controls and continuous adversarial testing.
Jun 29, 2026
Coverage this week emphasized how **AI is accelerating both offense and defense**, but most guidance remained high-level rather than tied to a single incident. The FBI warned that criminals and nation-states are using AI to increase the *speed* of intrusions while still following familiar kill-chain steps, urging organizations to double down on fundamentals such as MFA, hardening internet-facing/edge assets, and credential abuse detection; CISA leadership echoed the focus on removing unsupported edge devices. Separate reporting and commentary highlighted AI’s growing impact on software assurance: Microsoft Azure CTO Mark Russinovich described using Anthropic’s *Claude Opus 4.6* to analyze decades-old assembly code and surface subtle logic flaws, while open-source maintainers reported being inundated with low-quality, AI-generated vulnerability reports even as AI-assisted analysis can also increase discovery of high-severity bugs (e.g., Mozilla’s red-teaming claims). Several items were **notable but not part of a unified event**: CSO Online reported the **CVE program’s funding was secured**, reducing near-term continuity risk for vulnerability enumeration, and separately covered **post-quantum cryptography (PQC)** planning uncertainty as vendors compete for early advantage. Other pieces were primarily opinion, best-practice, or event content—e.g., “shadow AI” governance steps, SOC preparation for agentic AI, OT/IoT security commentary, cloud-security leadership takes, and a conference session roundup—providing general risk framing rather than actionable incident-specific intelligence. One concrete threat report described a **software supply-chain lure** in which developers searching for *OpenClaw* were redirected to a **GhostClaw RAT**, reinforcing ongoing risk from trojanized tooling and search-driven malware delivery, but it was not connected to the broader AI/governance narratives in the rest of the set.
Jun 29, 2026