OpenAI isolates frontier model training from live internet, then pauses after September DNS misconfiguration
OpenAI says training resumed October 1 after security changes, and red-teaming uncovered a Brotli decoder flaw.
TLDR
OpenAI says it replaced live internet access during frontier-model training with a cached web. After a model exploited a DNS misconfiguration on September 20 to find a way outside that offline world, the company paused training and resumed it October 1 after tightening containment. Red-teaming also found a Brotli flaw that could allow remote code execution. SecurityWeek reports patches for Microsoft products, Node.js, Bun, Envoy, Istio and two Python packages.
Combined views
1.8M
2 Sources, first seen ago