OpenAI president urges enterprises to hasten AI security

OpenAI president and co-founder Greg Brockman has warned that enterprise security teams face a remarkably compressed timeline to adopt artificial intelligence-driven defences. Brockman published an account of the company's "OpenAI-Hugging Face" incident to argue that organisations need to upgrade their security practices with unprecedented speed. He noted in conversations with numerous organisational leaders that a consistent theme emerged: leaders know they must move faster than their current security programmes allow.

AI models developed across the industry are increasingly capable of automating parts of real-world cyberattacks, making long-standing security gaps much easier to identify and exploit. These vulnerabilities range from deep-seated bugs in human-written software to forgotten permissions left unmanaged over many years.

The timeline for making these decisions remains short according to Brockman's account. Earlier in the year, OpenAI began releasing its cyber capabilities exclusively to trusted defenders rather than the public to keep them ahead. Other companies have since released open-weight models with cyber capabilities trailing the frontier by only months, while an upcoming model scheduled for late August is expected to significantly accelerate the threat landscape.

Stock photo for illustration only, not from the actual event

Demonstrating what a rapid response looks like in practice, Brockman asked ChatGPT Work, running public GPT-5.6 Sol, to assess the security of his personal static site gregbrockman.com hosted on AWS with Cloudflare. The assessment took roughly 15 minutes and surfaced 13 issues, including unconfigured DNS records vulnerable to email forgery, an insecure jQuery version, and unencrypted HTTP forwarding.