LOWSupply Chain
Global

OpenAI Revokes macOS App Certificate After Malicious Axios Supply Chain Incident

·Source: The Hacker News

Updated:

Executive Summary

OpenAI revealed a GitHub Actions workflow used to sign its macOS apps, which downloaded the malicious Axios library on March 31, but noted that no user data or internal system was compromised. "Out of an abundance of caution, we are taking steps to protect the process that certifies our macOS applications are legitimate OpenAI apps," OpenAI said in a post last week. "We found

Analysis

OpenAI revealed a GitHub Actions workflow used to sign its macOS apps, which downloaded the malicious Axios library on March 31, but noted that no user data or internal system was compromised. "Out of an abundance of caution, we are taking steps to protect the process that certifies our macOS applications are legitimate OpenAI apps," OpenAI said in a post last week. "We found
Source Attribution

Originally published by The Hacker News on Apr 13, 2026.

Related Threats

HIGHSupply Chain

Getting ahead of ‘harvest-now-decrypt-later’: Post-quantum cryptography planning

I’ve sat in enough boardroom conversations about quantum computing to notice a pattern. Someone raises it, someone else says “that’s ten years out,” and the topic gets tabled until next year’s budget cycle. The clock that matters isn’t the one measuring when a quantum computer arrives. It started running the moment your organization first sent sensitive data over a channel an adversary could captu

CSO Online
LOWSupply Chain

CVE-2026-85788 - Issue with awslabs mysql-mcp-server

<p><b>Bulletin ID:</b> 2026-103-AWS<br> <b>Scope:</b> AWS<br> <b>Content Type:</b> Important (requires attention)<br> <b>Publication Date:</b> 09/09/2026 09:30 AM PDT</p> <p><b>Description:</b></p> <p>We identified an issue in awslabs.mysql-mcp-server (an open-source, self-hosted Model Context Protocol server distributed via github.com/awslabs/mcp and PyPI). In affected versions, under certain con

CVE-2026-85788
AWS Security Bulletins
LOWSupply Chain

CVE-2026-85012 - OS command injection in the Amazon CodeCatalyst blueprints SDK

<p><b>Bulletin ID:</b> 2026-095-AWS<br> <b>Scope:</b> AWS<br> <b>Content Type:</b> Important (requires attention)<br> <b>Publication Date:</b> 09/03/2026 10:00 AM PDT</p> <p><b>Description:</b></p> <p>Amazon CodeCatalyst blueprints are reusable project templates that generate a software project. The @amazon-codecatalyst/blueprints.blueprint npm package is the open source framework that blueprint a

CVE-2026-85012
AWS Security Bulletins