OpenAI Rotates macOS Certificates Following Axios Supply Chain Breach
2026-04-13T20:51:46Z•0bb573406ecc00277e27932a8ca1351e20b403287b7e2772def811fd77187d23
aptaxiosbitter aptcertificate rotationclaudedata exfiltrationddos-for-hiredeprecated endpointsfluxstressghost apisgpt-4.1linkedin phishinglinux foundation impersonationllm-assisted exfiltrationmacos certificatesopenaiopenssfphishing marketplace takedown (fbi)prospysignal phishingslack malwarespearphishingsupply chaintospyw3llstore
What happened
Multiple high-impact security incidents and trends: OpenAI rotated macOS certificates after downloading a compromised Axios package and urged users to update before revocations take effect; BITTER APT is distributing ProSpy/ToSpy via Signal, Google and Zoom lures targeting journalists; OpenSSF warns of Slack-based malware campaigns impersonating Linux Foundation figures; researchers flag risks from ‘ghost’ (deprecated) APIs; alleged Fluxstress/Neldowner DDoS-for-hire operator arrested in Thailand; a single actor used Claude Code and GPT-4.1 to exfiltrate hundreds of millions of Mexican records
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- hackread
- Record identifier
- 0bb573406ecc00277e27932a8ca1351e20b403287b7e2772def811fd77187d23
- Enrichment time
- 2026-04-13T20:51:46Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.