OpenAI Codex in the Media

32 Unique 0-Days Exploited in Samsung S26, Pixel 10, OpenAI Codex and Other Devices in Pwn2Own 2026

Security researchers reportedly exploited 32 unique zero-day vulnerabilities and earned $388,500 on the opening day of Pwn2Own Ireland 2026. Samsung Galaxy S26, OpenAI Codex, smart home devices and AI services fell to working exploits, but the Google Pixel 10 attempt failed within the contest…

OpenAI Codex Adds Reusable Cloud Setups for Coding Across Devices

OpenAI Codex now lets developers publish one prepared GitHub…

OpenAI Codex Is Retiring the Last Model that Behaves Like an Assistant

I opened Codex CLI today and it showed me this notice: "GPT-5.5 retires on October 14, 2026. Switch to GPT-5.6 Sol to... Read More...

OpenAI Codex Sandbox Flaws Let Malicious Repositories Execute Commands on Host Systems

OpenAI Codex recently faced two significant security vulnerabilities that allowed malicious repositories to potentially execute commands on a developer’s local system. These vulnerabilities, identified as Overpatch and Heapjack, were reported to OpenAI on August 12, 2026, and were…

Researchers escape OpenAI Codex sandbox to run commands on host

Researchers escaped OpenAI's Codex sandbox two ways, one running commands on a developer's machine from its most locked-down mode. OpenAI has patched both. [...]

Unity launches official plugins for Claude Code and OpenAI Codex to stop AI agents from using outdated tutorials

Unity has released official plugins for Claude Code and…

AI agent swarms are a massive waste of tokens with zero quality gain, says OpenAI Codex developer

OpenAI Codex developer Eric Provencher warns that running more than…

Logitech MX Keypad puts Claude Code and OpenAI Codex controls on your desk

Fake OpenAI Codex download tricks macOS users into installing malware

A malware campaign using a sponsored search ad and a fake OpenAI Codex download page to trick macOS users into pasting a malicious command into Terminal has been uncovered by Cato Networks. It’s a variation of ClickFix, a popular social engineering technique that persuades victims to…

Some Mac users think they're installing OpenAI Codex, but it's actually a malware that can steal passwords in seconds

An elaborate scheme was designed to deploy AMOS, a known macOS infostealer malware.

Hackers Abuse Google Sites to Host Fake OpenAI Codex Download Pages

Cybercriminals are using Google Sites to host fake download pages for OpenAI Codex, turning a familiar search into a malware trap. The campaign targets macOS users and relies on paid search placements to steer them toward a convincing but fraudulent installer page. The page does not simply…

Crooks push Mac malware through fake OpenAI Codex ads

Sponsored search results lead developers straight into a ClickFix malware trap

OpenAI Codex lead points to sub2api as users report shrinking limits

OpenAI’s Codex lead, Thibault Sottiaux, has clarified that the company did not change usage limits without informing developers. The company is instead directing the blame to third-party “sub2api” tools after paying users reported that their weekly Codex allowance was draining…

AWS Continuum integrates with OpenAI Codex and Anthropic Claude Code in major AI security push

Amazon Web Services is threading its AI-powered security infrastructure directly into the coding environments built by two of its fiercest rivals — and in doing so, it is making a bold bet that controlling the security layer matters more than controlling…

Meta launches Muse Code AI coding agent to challenge Anthropic’s Claude Code and OpenAI Codex

Meta is jumping into the AI coding-agent race with Muse Code, a new terminal-based coding agent built to handle complete software engineering tasks across large repositories, putting the company in more direct competition with Anthropic’s Claude Code and OpenAI Codex. […]

Claude Code, Cursor, and OpenAI Codex Trigger Cyberattack-Like Telemetry Alerts

AI-powered coding assistants such as Claude Code, Cursor, and OpenAI Codex are increasingly triggering endpoint detection and response (EDR) alerts that resemble active cyberattacks, according to new research from Sophos X-Ops. This analysis, based on real-world telemetry collected in June…

OpenAI Codex Desktop App for macOS Vulnerability Allows Attackers to Inject Indirect Prompt

A newly disclosed vulnerability in the OpenAI Codex desktop application for macOS could allow attackers to exploit indirect prompt injection techniques to exfiltrate sensitive data, according to a recent entry in the GitHub Advisory Database. Tracked as CVE-2026-14898, the issue arises from how…

Zhipu AI launches ZCode to challenge Claude Code and OpenAI Codex at a fraction of the cost

Agent Skill Malware Targets Claude Code and OpenAI Codex With Scanner-Evasion Techniques

A new class of malicious software is quietly slipping past the security tools meant to protect popular AI coding assistants. Researchers have found that malware hidden inside “agent skills,” small add-on packages used by tools like Claude Code and OpenAI Codex, can be reshaped to…

OpenAI Codex Logging Could Kill SSDs With Writes of 640 TB a Year

OpenAI Codex local SQLite logs…

SpaceX purchases Cursor, a Claude Code and OpenAI Codex competitor [U]

When SpaceX isn’t landing rockets, it’s apparently landing AI company deals. In February, the firm…

OpenAI Codex referral program rewards users with extra rate resets

Pipedrive joins OpenAI Codex Sales Plugin launch for CRM-linked workflows

Pipedrive plugs CRM data into OpenAI Codex sales workflows, raising the bar for CRM hygiene, access control, and enablement playbooks.

OpenAI Codex Helps Expose Decades Old HTTP/2 Bomb Server Attack

A popular OpenAI Codex tool with 29,000 weekly downloads has been quietly stealing developer tokens for a month

The npm package looked legitimate. It had an active GitHub repository, steady development history, and roughly 29,000 weekly downloads. For developers using OpenAI Codex, it…

Attack targeting OpenAI Codex users exposes AI software supply chain risks

OpenAI Codex tool with over 29,000 downloads linked to malicious npm supply chain attack stealing authentication tokens

A tool started benign and turned sour after a little while, stealing tokens and granting persistent access.

OpenAI Codex Authentication Tokens Stolen in codexui-android npm Supply Chain Attack

Cybersecurity researchers have disclosed details of a new malicious supply chain campaign that's targeting developers using OpenAI Codex through a legitimate-looking remote web UI. The tool, named codexui-android, is advertised on GitHub and npm as a remote web UI for OpenAI Codex, attracting…

AI startup CEO Dan Shipper spent $13,000 on OpenAI Codex in a month, and isn't worried

Every CEO Dan Shipper says AI is becoming as essential to modern workplaces as laptops and employee benefits, even as usage costs climb sharply.

Legitimate-Looking Codex Remote UI Steals OpenAI Codex Authentication Tokens

A polished, fully functional npm package has been caught secretly stealing OpenAI Codex authentication tokens from developers who trusted it. The package, named codexui-android, presented itself as a remote web UI for OpenAI Codex with no obvious signs of being malicious. It built a genuine…