Apple and OpenAI: How an access vulnerability turns into a data leakage risk

Colleagues, I’d like to draw attention to a cybersecurity update.

Apple says a former employee, after moving to OpenAI, gained access to confidential files through a rare, previously unknown authentication flaw.

According to the company, he was able to download dozens of internal documents: data on unreleased products, technical specifications, and project materials.

Apple also says the vulnerability has already been fixed, and the employee’s access was terminated after the incident was discovered.

Why this matters: it once again shows how critical it is to revoke access quickly for departing employees and to control accounts and shared storage.

How does your company manage offboarding access?