Back to the radar Cybersecurity

OpenAI demite pesquisadores por suposto vazamento de dados

Cybersecurity

Funcionários teriam compartilhado dados confidenciais com uma organização externa de segurança de IA. OpenAI demite pesquisadores por suposto vazamento de dados

Funcionários teriam compartilhado dados confidenciais com uma organização externa de segurança de IA. OpenAI demite pesquisadores por suposto vazamento de dados

Em contexto

  • Tema: Ciberseguridad — Riesgo, identidad, respuesta a incidentes y cumplimiento.
  • Fonte: Tecnoblog
  • Publicado: 02/10/2026

Continuar lendo na fonte original →

Trecho publicado automaticamente pelo radar do site. O texto completo pertence ao veículo e está vinculado acima.

Why it matters

Most incidents that end up being expensive did not start with a sophisticated technique. They started with an account that should have been closed when somebody resigned, a server nobody knew was still on, or a broad permission granted to unblock someone that then stayed forever.

I read it with the same short list as always: second factor on anything that grants access, tested backups kept off the network, and a real inventory of what is exposed to the internet. It is not glamorous, and it still prevents most disasters.

What usually goes wrong

Where it usually breaks is response, not prevention. There are tools, there are alerts, and when something real happens nobody knows who decides to disconnect, who gets called first, or what the customer is told. Valuable hours get lost arguing about that while the problem grows.

What to watch

  • How it was communicated to customers and regulators, which is where reputational cost is decided.
  • Whether third parties or suppliers were in the chain, because the perimeter now includes partners.
  • How long it took to detect, usually the most revealing metric in the whole case.

How I read this entry

If this happened near an organisation I advise, the conversation I would force is not about tools. It is about the rehearsal. How many times the incident was simulated, who calls whom, what gets said to customers and when. A plan never rehearsed is not a plan, it is a document.

The original story is published in another language; the excerpt is quoted as the publisher delivers it and the commentary is written in English.
Share

Comments

No comments yet. Yours can be the first.

Plain text only, no links. No email is requested. Comments are reviewed before they are published.

Living through this in your own team?

Open the chat and tell me how you're handling it. I'm interested in comparing notes.

Keep reading

More entries from the radar

See all
Darinel Ortega Online · I reply during the day
Today
Hello. I'm not selling anything here: this is for exchanging knowledge about technology.
Write whatever you like — you can send text, images or documents. Messages reach my console and I reply from there.

An open conversation to share knowledge. Messages reach my console and I reply from there.

Let us book a conversation

Pick the day and time that work for you. Thirty minutes, no sales pitch.

Video call

For a video call, just ask for one here and I'll send you the session link.