CVE Tools

Srsly Risky Biz: OpenAI's Kazoo-Grade Spying Incident

Risky Business NewsBy Tom Uren

IncidentOpenAI

Our summary

A Saudi national employed at OpenAI, Abdulrahman Alfozan, has been criminally charged for secretly planting a cheap $13.90 microcontroller-based recording device, disguised with toilet paper, into a confidential executive conference room at the company's San Francisco office. Court filings show he used ChatGPT beforehand to research building a covert audio recorder and to pick out target rooms, and he had close ties to a member of the Saudi royal family who urged him to return home for an AI initiative. Commentators suggest this looks less like formal state espionage and more like an attempt to boost his resume with stolen corporate secrets, but it highlights how weak operational security at frontier AI labs leaves them exposed to far more sophisticated intelligence targeting. Separately, researchers at NorForge documented criminal groups weaponizing the open-source "Cairn" autonomous AI pentesting agent, finding roughly 20 exposed dashboards running over a thousand attack projects against retail and financial targets, succeeding in about 10% of attempts at an estimated cost of just $50 per successful breach.

Read at Risky Business News

Risky Business News publishes this story on its own site; we link to it rather than reprint it.

Worried this affects your company?

Discuss a security assessment of your internet-facing systems. Scope agreed before testing.

Check my exposure