OpenAI macOS app fix
OpenAI confirmed a security incident linked to the Axios library but said no user data was breached, and it’s updating macOS app certifications — users are being asked to update the official apps. (x.com) The prompt re‑certification is a reminder to get software only from official links and to install vendor updates quickly. (x.com)
OpenAI told Mac users on April 10, 2026 to update its desktop apps after finding a security issue tied to Axios, a third-party developer tool used in the process that proves an app really came from OpenAI. The company said it found no evidence that user data was accessed, its systems were compromised, or its software was altered. (openai.com) That warning was not about a bug inside ChatGPT’s answers or a leak from user chats. It was about app signing, the digital ID card that macOS checks before it trusts a downloaded app. (openai.com) App signing works a bit like a wax seal on a letter. If an attacker can interfere with the signing chain, the risk is not that your old app suddenly turns evil, but that a fake app could look more believable to macOS and to users. (openai.com) OpenAI said it is rotating those security certifications now, which is why every macOS user has to install the latest version. The goal is to cut off any chance, “however unlikely,” that someone could distribute a fake OpenAI app that appears legitimate. (openai.com) The Axios part matters because modern software is built from layers of other people’s code. A single compromised library can ride into a company’s build system the way a bad part can slip into a factory assembly line. (reuters.com) Reuters reported on April 10, 2026 that the affected process was the one OpenAI uses to certify its macOS apps as legitimate OpenAI software. That is narrower than a companywide breach, but it is exactly the kind of step attackers target because it sits between the developer and the user. (reuters.com) The apps OpenAI is telling people to update include ChatGPT for macOS, Codex, Atlas, and Codex Command Line Interface. OpenAI’s download pages and help center say the official Mac app should be installed from OpenAI’s own desktop download page, not from random links or reposted installer files. (openai.com) (help.openai.com) This is why security teams obsess over updates that look boring. When a vendor changes certificates, the update is not adding a shiny feature; it is replacing the lock on the front door before someone can copy the old key. (openai.com) If you use OpenAI’s Mac apps, the practical move is simple: update through the app itself or from OpenAI’s official download pages, and ignore any installer sent in email, chat, or search ads. In this case, OpenAI says the danger was a trust problem around software identity, not a confirmed theft of chats or accounts. (openai.com) (help.openai.com)