OpenAI MacOS App Security Issue
Analysis based on 8 articles · First reported Apr 11, 2026 · Last updated Apr 11, 2026
The market impact is moderately negative for OpenAI due to a security incident involving a third-party tool, Axios, potentially affecting user trust. However, the direct financial impact is mitigated as no user data or intellectual property was compromised.
OpenAI identified a security issue related to Axios, a third-party developer tool, which was compromised on March 31 as part of a broader software supply chain attack by actors believed to be linked to North Korea. A misconfigured Microsoft===GitHub Actions workflow used by OpenAI led to the download and execution of a malicious version of Axios, which had access to certificate and notarization material for signing MacOS applications like ChatGPT Desktop, Codex, and Atlas. OpenAI found no evidence of user data access, system compromise, or software alteration. The company is updating security certifications and requiring all MacOS users to update their OpenAI apps to the latest versions to prevent the distribution of fake apps. Older versions of MacOS apps will no longer be supported after May 8. Passwords and OpenAI API keys were not affected, and the root cause, a Microsoft===GitHub Actions workflow misconfiguration, has been addressed.
Set up alerts, explore entity relationships, search across thousands of events, and build custom intelligence feeds.
Open Dashboard