Context: A poster says the data-sharing setting their team had turned off in Codex was switched back on without anyone opting in.
From Hacker News: My company is pretty paranoid about leaking IP to the frontier labs through prompts, so we've all been diligent about disabling data sharing in Codex/Claude Code/etc. But yesterday my coworkers and I noticed that the setting had been silently reenabled in Codex. None of us knowingly opted back in.
The agent running on a remote machine can authenticate using your local SSH credentials. That means it can push to your private repos on GitHub, for example. Proof: https://github.com/openai/codex/pull/28131#discussion_r3410013180
OpenAI is partnering with Hacktron to find vulnerabilities, test connections with third-party services, and strengthen defenses with frontier AI.
OpenAI's cybersecurity model, a version of GPT-6 Astra, finds exploitable vulnerabilities and develops fixes while staying within authorized scope.
OpenAI announced it will buy the low-profile developer tooling startup; terms were not disclosed, and observers read it as a shot at GitHub for the age of agents.
OpenAI details a pipeline that used an upcoming cyber model to validate and patch 948 local privilege escalation vulnerabilities in Linux for $1.2M in API costs — Security research that once required a separate, sustained investigation for each finding can increasingly be run as a systematic…
