OpenAI calls Astra its first Critical cyber model under the Preparedness Framework. Stronger safeguards after Hugging Face lessons; advanced cyber limited at launch.
OpenAI is connecting authorized Epic patient charts to ChatGPT for Healthcare, plus a plugin for official public medical data. It’s read-only. It still isn’t a diagnosis.
The Pentagon put ChatGPT Mil and Grok for Government on GenAI.mil today. IL5 workplace tools for unclassified CUI — planning, policy, logistics — not combat.
The European Commission put ChatGPT in the DSA’s search-engine tier today, not just as a chat app, with Reddit and Roblox tagged as very large platforms. Same 45-million-user bar. Extra systemic-risk rules kick in by January 2027.
OpenAI told SpaceX it will wind down Cursor’s model contract, with a proposed shutoff on November 12, 2026. The reason OpenAI put on the page is trust after SpaceX bought Cursor’s parent.
On 27 August OpenAI posted an open letter asking for a surge in cyber defense. TechCrunch, CNBC, and the BBC say more than 100 companies signed it, including OpenAI, Anthropic, Google, and Microsoft. I am treating the letter as the story, not yesterday’s Hugging Face paper.
On 26 August OpenAI released its official writeup of the July Hugging Face breach, and METR and Redwood published an independent count: about 1,200 agents found a shared message board, more than 70,000 messages, roughly 700 in the attack. OpenAI says chain-of-thought monitoring would have paged security a day earlier. That last part is their counterfactual.