Loading story…
OpenAI said it will acquire Ona, formerly Gitpod, as part of a push to give Codex persistent, secure cloud development environments instead of relying on a developer’s local machine. The move is intended to let coding agents keep working across longer-running tasks in customer-controlled workspaces, extending Codex beyond short interactive sessions and supporting more autonomous software development workflows.
Reporting on OpenAI’s product roadmap said the company expects Codex to evolve quickly enough that today’s version will soon appear "primitive," with expansion planned across desktop, mobile, and parallel task management. The shift to cloud-hosted agent workspaces is positioned as a foundation for that roadmap, but it also raises security concerns for enterprises, including access control, isolation, and governance over AI agents operating continuously inside development environments.
Track how attackers are adapting to this technology.
3 events from the most recent confirmed update back to the earliest known activity.
In early July, OpenAI launched a new GPT-5 model for Codex. The New Stack reports Codex surpassed 8 million users shortly after the GPT-5 launch.
In June, OpenAI said it plans to acquire Ona, formerly Gitpod, as part of the next phase of Codex. OpenAI said Ona's secure cloud development environments would help agents keep working in a customer's cloud after the initiating laptop is closed.
In February, OpenAI published an experiment in which Codex worked continuously for about 25 hours, using around 13 million tokens and generating roughly 30,000 lines of code to build a design tool from scratch.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
Follow how adversaries are adapting to this technology, and where it touches your stack today.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
OpenAI announced **GPT-5.3-Codex**, positioning it as more than a code-generation model and expanding its availability across a new macOS desktop app plus CLI, IDE extension, and web interface, with API access described as forthcoming. OpenAI and third-party coverage said the model is intended to support broader software-lifecycle work (e.g., debugging, deployments, monitoring, tests, and documentation) and highlighted benchmark gains over prior Codex versions; reporting also pushed back on claims that “Codex built itself,” characterizing OpenAI’s statement as the model being *instrumental* in its own development rather than fully autonomous. In parallel, OpenAI unveiled **Frontier**, an enterprise framework aimed at building, deploying, and managing AI agents, including promised agent security features and an approach modeled on Palantir-style **forward-deployed engineers** working alongside customer teams. Separately, *MintMCP* launched an enterprise governance platform focused on deploying, monitoring, and securing AI agents and MCP servers, emphasizing audit trails, policy enforcement, observability/guardrails, and centralized access controls to reduce risks from privileged agents (e.g., credential exposure and data exfiltration). Other items in the set were not tied to these launches, including a general CIO column on SMB IT “quick fixes” creating long-term risk and a corporate internal AI learning program announcement from Hancom.
Jun 29, 2026
OpenAI has announced the release of Codex Max, a new version of its programming-focused AI model, designed to handle larger workloads and deliver faster performance. The Codex Max model features improved context handling, allowing it to process more information in a single session, and offers faster execution with fewer tokens, resulting in greater efficiency for real-world coding tasks. This update is available to users of ChatGPT Plus, Pro, Business, Edu, and Enterprise, with API access planned for the near future. Notably, Codex Max is the first Windows-trained Codex model, enhancing its utility for cross-platform development and agentic coding tasks. The new model replaces GPT-5.1-Codex as the recommended solution for complex coding environments, supporting larger project assignments without being overwhelmed by context limitations. OpenAI's move follows a series of major AI programming announcements from other industry leaders, positioning Codex Max as a significant advancement for developers seeking improved productivity and scalability in AI-assisted coding. The release is expected to streamline development workflows and support more sophisticated automation in software engineering environments.
Jul 12, 2026
OpenAI announced plans to acquire **Promptfoo**, positioning the deal as a way to strengthen security testing for *AI agents* and application workflows, alongside separate claims that its **Codex Security** capability identified **11,000 “high-impact” bugs in a month**. The coverage frames these moves as part of a broader push toward automated, AI-assisted security validation in software development and DevSecOps, with an emphasis on scaling vulnerability discovery and testing as organizations adopt agentic AI. Other items in the set are largely *opinion/feature* pieces or unrelated security-policy reporting rather than additional reporting on the OpenAI/Promptfoo transaction or Codex Security results. Notably, one article reports that **CVE program funding was secured**, easing concerns about continuity of the vulnerability identifier ecosystem, while several other references discuss general themes such as IAM strategy in the public sector, access-decision risk in identity security, OT/legacy industrial cyber risk, SOC preparation for agentic AI, and post-quantum cryptography (PQC) planning—useful context, but not the same specific event as the OpenAI acquisition or Codex Security claim.
Jun 29, 2026