Loading
Loading
We use strictly necessary cookies to run this site, and analytics cookies to understand how it's used. See our Privacy Policy for details.
A jailbreak toolkit targeting OpenAI Codex is doing more than trying to bypass AI safety rules.
Summary
The Chinese-language package, called Haiou, changes the coding agent’s trusted instructions so that ordinary greetings trigger advertisements for a third-party AI gateway.
This is a brief wire summary, the full story (linked below) has the complete details.
KazaSec's take
Source code, and the third-party packages it depends on, is one of the most overlooked parts of an organization's real attack surface. A secure code review catches exactly this class of issue before it ships, not after it's already public.
Coverage details
We've archived 277 other articles touching the same topic (cyber security, threats, cyber security news) , see the full security news archive.
Relevant from KazaSec
More coverage on this topic
We help organizations find and fix the gaps before they make headlines.