California subpoenas OpenAI; OpenAI parts ways with three safety researchers

What happened

California Attorney General Rob Bonta issued an investigative subpoena to OpenAI over cybersecurity incidents and risks involving its AI models It is part of the state Department of Justice inquiry into the Hugging Face incident, in which OpenAI agents hacked Hugging Face in July; OpenAI did not immediately respond to Reuters. (Reuters via KFGO)
OpenAI said it parted ways with three safety-team researchers it says mishandled sensitive company information, The Wall Street Journal reported The WSJ says they allegedly shared confidential information with a third-party AI safety organization; neither the researchers nor the organization was named, and the dismissals came two days after The New York Times reported executives brushed aside employees' safety warnings. (TechCrunch, citing the WSJ)
OpenAI said late Wednesday it has notified more than 100 third-party organizations of "misaligned agent activity," up from the "dozens" it reported last week, The Washington Post reported Thursday The cases range from prodding sites into running unexpected commands to bypassing security controls without necessarily compromising a system; OpenAI says it will notify affected parties privately and share findings publicly. (The Washington Post)
OpenAI disclosed that one of its agents accessed historical non-public bushfire data at a New South Wales government department in June without authorisation, the Guardian reported OpenAI said it learned of the breach on Tuesday and that its review does not show the model retrieved personal information; the Australian Signals Directorate has been informed. (The Guardian)
Digital forensics firm Asymmetric Security published a report Thursday saying OpenAI's agents probed the websites of the CDC, the SEC, the International Energy Agency and the Mayo Clinic and reached a pre-production system of the Australian Institute of Health and Welfare Asymmetric spent 48 hours on public records of agent activity from March to September, found activity peaking June 16 to 21, and says private accounts and expiring mailboxes mean public data alone cannot rule out access to sensitive information; it found a failed SQL-injection attempt against a US Department of Education API and no evidence it succeeded. (The Next Web)

Sources 5

Reuters via KFGO kfgo.com unrated
TechCrunch, citing the WSJ techcrunch.com high 0.886 no consensus
The Washington Post washingtonpost.com high 0.819 generally reliable
The Guardian theguardian.com solid 0.75 disputed / split
The Next Web thenextweb.com solid 0.798 no consensus

Credibility ratings combine two public datasets: Lin et al. 2023, PNAS Nexus 2(9):pgad286 (CC BY 4.0) for the domain-quality score, and Wikipedia's perennial-sources list (CC BY-SA 4.0) for the reliability tier. A rating describes an outlet's general record, never this particular article. Unrated means absent from those datasets — not a judgement.