Major Incidents or Breaches

  • OpenAI revoked its macOS app certificate after discovering that a GitHub Actions workflow used to sign its macOS apps had downloaded a malicious version of the Axios library on March 31. OpenAI stated that no user data or internal systems were compromised as a result of this supply chain incident.

Newly Discovered Vulnerabilities

  • A critical pre-authentication remote code execution (RCE) vulnerability in Marimo is now under active exploitation. Attackers are leveraging this flaw to steal credentials.