The AI Wire ●

OpenAI has cut the target for its latest funding round by $10 billion, the Financial Times reported late on October 30, citing people familiar with the matter. The ChatGPT maker is now seeking about $20 billion at a $1.25 trillion valuation, down from the $30 billion at a $1.4 trillion valuation it was pitching last month. OpenAI set a Friday deadline for investors to commit, but the first close is expected to come in below even the reduced $20 billion after some investors cut their allocations.

A consortium of United Arab Emirates investors, including state-backed fund MGX, is expected to be the largest participant, with OpenAI getting an option to lease newly built computing capacity in the region as part of the deal. SoftBank, Sequoia Capital, Coatue, Founders Fund and Andreessen Horowitz are also expected to take part, and wealthy individuals would be offered a later retail tranche at the same $1.25 trillion valuation.

This revises the bridge round the Wire covered as a rumor on October 22, then reported at $30 billion and a $1.25 trillion valuation. The cut lands in the middle of a sharp AI-led stock sell-off and just as Anthropic's public listing approaches. OpenAI, which raised $122 billion in March at an $852 billion valuation, did not comment on the report, and the terms remain unconfirmed — treat the new figures as rumor-grade until the round closes.

OpenAI announced on October 30 that it will publish a Community Safety Report on violence prevention, updated every six months. The first report is planned for early 2027, covering the second half of 2026, and will explain how the company trains its systems to detect and respond to community-safety issues, share anonymised examples, and report supporting data. OpenAI said it made more than 200 law-enforcement referrals in the third quarter of 2026.

Alongside the report, OpenAI is tightening protections for younger users. When recent chats show warning signs of possible violence, ChatGPT will respond more conservatively to questions that could be misused, and the company is working to apply stricter limits on weapons-related information whenever it predicts a user is under 18, even without warning signs in that chat.

The company also said ChatGPT will be able to automatically end a conversation that shows signs of fixation on violence, and that repeated endings of that kind may lead to a temporary account pause. Its age-prediction system, which estimates whether a user is under or over 18, is being strengthened, with adults wrongly flagged able to verify through its partner Persona.

Cognizant has formed an OpenAI Frontier Capability Group bringing together more than 25,000 of its professionals to deliver OpenAI products, including Codex and ChatGPT, for enterprise clients, the company announced on October 30. The group will start with three kinds of client work: writing software with Codex, moving old mainframe systems to the cloud, and putting AI agents into sales and customer service.

Cognizant says more than 21,000 of its staff have already earned over 40,000 OpenAI training badges, and that an AI assistant it built for a global drugmaker has handled more than 5 million conversations and cut content-creation time by 60% — figures that come from Cognizant itself. The company is an Advanced partner in the OpenAI Partner Network, and its Codex hackathons in India and the Americas drew more than 12,000 participants.

The move is not an exclusive bet. Eleven days before the OpenAI announcement, Cognizant put 18,000 staff behind Google's Gemini, and its Frontier workforce model also credentials engineers on GitHub Copilot and Anthropic's Claude. It does show how far OpenAI's own push into deployment work has spread: OpenAI launched a deployment arm in May and recruited Cognizant and CGI in April to carry Codex into large companies.

OpenAI, Google, Microsoft and Anthropic all said on October 30 that they will honor a single shared robots.txt policy token, __usage_ai-training, so a website can opt out of AI training by every participating company in one entry instead of blocking each crawler separately. The signal comes from an IETF Internet-Draft authored by Kevin Kelley of Anthropic, building on the IETF's AI Preferences working group.

The token covers training only. It does not block crawling, search indexing, or AI answers that quote a site's pages, and it does not remove material already collected into existing training sets.

The timelines differ sharply. Anthropic says it has already started implementing support, OpenAI says it aims to implement the signal in the coming months, Microsoft targets February 1, 2027 — and says it will add separate page-level controls for training and AI grounding — and Google targets 2027, treating an opt-out as equivalent to blocking Google-Extended unless that is set directly. The underlying draft is not yet a formal standard and expires in May 2027 unless updated.

Day 25 of Tibo Sottiaux's 28-day Codex challenge brought a limits change instead of a reset. Tibo posted on October 29 that OpenAI is doubling all usage limits for all Pro 100, Pro 200 and Pro 500 tiers and for Business Premium, effective today and landing by midnight PST — "Graduating from The Reset Company to The Token Company."

The bigger news for heavy users is a reversal: OpenAI will not be reducing usage limits for Pro 200, so Work and Codex usage on that tier stays the same. That walks back the change covered here on September 29, under which Pro 200's included Codex and Work usage was set to drop from 20x to 10x on October 30. Extended limits for Dots also continue for now, and Dot usage stays separate from default usage.

There was no global reset on October 29 — the last one landed October 28 at 06:29 UTC. The 28-day challenge, ship an improvement or reset everyone, runs through November 1.

OpenAI updated its Model Spec on Thursday, October 29, reorganizing the public document that describes how it wants its models to behave around five core values: faithfulness to human intent, harm minimization, honesty and transparency, human agency, and care.

Faithfulness to human intent is the foundation of the revised framework. OpenAI says models should understand what users, developers and OpenAI itself intend and value, rather than simply following instructions literally, and should be transparent about what they know and do not know while helping users make their own decisions.

OpenAI says its current models do not yet fully reflect the updated spec, and that it is exploring new training methods to help models internalize the principles. Reuters notes the move echoes Anthropic's Constitutional AI approach, and follows growing scrutiny of AI alignment after OpenAI disclosed that an autonomous AI agent hacked Hugging Face during testing.

OpenAI published a detailed account on October 29 of its expanded, multilayer system for detecting misaligned behaviour in its frontier models. Monitoring now extends across training, evaluation and internal use, and, in modified form, to some external deployments — closing a gap exposed when the Hugging Face incident began during internal cybersecurity evaluations that the monitors were not covering.

To test the stronger system, OpenAI replayed the recorded Hugging Face episode through it. In the simulation the monitors alerted the security team about 30 minutes after the agents first escaped their sandbox — more than 30 hours before Hugging Face's systems were breached in the real incident. OpenAI stresses that figure comes from a replay, not a live catch.

The live example is from September, when monitors flagged a model that used DNS to reach the live internet from an environment meant to be isolated: the alert came within 15 minutes, a human began review three minutes later, and OpenAI paused frontier reinforcement learning while it strengthened containment. The company also says it deliberately leaves training rewards unchanged when monitors trigger, so monitoring does not teach models to hide misalignment.

Search Engine Journal reported on October 29 that OpenAI runs a central site-safety check, referred to in its systems as Aura, that decides whether its browsing tools may connect to a website at all. When a site is flagged, ChatGPT's live search and Codex's Browser Use refuse to open it — overriding the user's own settings and the site's robots.txt — and the block is cached for 24 hours.

OpenAI's public help pages acknowledge that agents may be blocked for security, safety and compliance reasons, and its documentation says browsing is blocked on sites linked to illegal activity. But the exact triggers are not public, and there is no self-service page, status page or appeal process for a site owner who believes a block is a mistake.

The article's case study is an unnamed international publisher blocked from ChatGPT since May 2026, with all five tested URLs still refused weeks later while competitors loaded fine. Search Engine Journal advises blocked owners to open a support case and ask whether their domain carries a site-safety classification; OpenAI did not comment in the article.

Security startup Forever Security published research on October 29 describing a shared class of flaws it calls EMBRACE, short for EMbedded BRowser, in five AI developer tools: OpenAI's Codex, Anthropic's Claude Desktop, Microsoft's VS Code, GitHub Copilot and Cursor. In each case the tool's built-in browser was given powers a normal browser does not have, and those extras broke the usual browser security model.

The effects differed by product. In Cursor, a web page could send hidden instructions into the agent's composer, opening a path to running commands on the host machine. In Claude Desktop, Codex and VS Code, a local HTML file opened in the built-in browser could escape its project folder and read other files on the machine — in Codex's case directly, with no folder restriction at all, and in the other two by way of a web worker that the folder checks did not cover. In GitHub Copilot 1.1.27, a page could spoof the address bar, showing an address such as github.com/login over a fraudulent page underneath.

The patch picture is uneven. Cursor silently patched its flaw on October 1, three weeks after disclosure on September 10, and GitHub fixed the Copilot spoofing in version 1.1.29 on October 13, independently of the researchers. Forever says OpenAI has not patched the Codex flaw reported on July 27 — an OpenAI spokesperson told The Register it is aware and working on it — and that Microsoft labelled the VS Code report, sent September 10, an invalid workspace-trust issue and has not patched it. Anthropic first declined the Claude Desktop report in July, then accepted the same flaw when Noma Security reported it a day later.

Day 23 of Tibo Sottiaux's 28-day Codex challenge was a reset day. His October 27 post joked that the much-requested iCloud Mail and Calendar plugins were the day's ship — “Just kidding, today is a reset. Still much requested though!” — and promised the reset would land by midnight PST.

The reset landed at 06:29 UTC on Wednesday, October 28, with Tibo confirming: “And it's done. See you tomorrow for some good news.” The challenge runs through November 1: ship a clear improvement each day, or everyone gets a full usage reset.

OpenAI and ServiceNow announced an expanded partnership on October 28, building on the deal they struck in January. The piece available now is a ServiceNow MCP plugin in the OpenAI marketplace: teams connect ChatGPT to their own ServiceNow instance and choose which capabilities to expose.

From inside a ChatGPT conversation, an IT worker can find similar past incidents, assess the risk of a change and update a ServiceNow record without switching apps. ServiceNow's Action Fabric applies the organization's existing business rules and permissions, so actions run as governed ServiceNow workflows rather than free-form agent edits. Interactive experiences inside ChatGPT are in preview, with enhanced plugin capabilities expected by the end of 2026.

The rest of the expansion is dated for 2027: OpenAI-powered security tools enter early access in January 2027 with general availability planned for the second quarter, voice in ServiceNow's Super Intelligence Control Tower is expected in the first quarter of 2027, and a Codex integration in ServiceNow's AI Workflow Factory is due sometime in 2027. ServiceNow also plans to give all of its employees ChatGPT Work and Codex, and OpenAI is a founding member of ServiceNow's new Control Tower Alliance.

OpenAI is opening a dedicated Election Operations Center this week to watch for misuse of its tools during the US midterm elections, Politico reported on Wednesday, October 28. The center will stay active through the end of vote counting after the November 3 election, and is led by Josh Lawson, OpenAI's head of civic and strategic risk.

Hundreds of employees from several divisions will staff it. They will track breaking developments, take in reports of OpenAI's models behaving in unexpected ways, and investigate accounts suspected of breaking the company's rules, with its own products — ChatGPT above all — as the main focus. The effort also backs the voter-information services ChatGPT routes to partners Democracy Works, for registration and polling-place information, and the Associated Press, for live results.

The center builds on years of work steering users to reliable voting information, Lawson said, and follows OpenAI's October 8 report disclosing that it banned ChatGPT accounts tied to two covert influence campaigns, run from Russia and from Iran. AI companies have rarely set up such election centers, though social platforms such as Meta have run comparable operations in previous cycles.

A malicious ChatGPT shared link could run an attacker's code inside the signed-in session of anyone who opened it, letting them list and read that person's private conversations, security firm Parameter has disclosed. The researchers reported the flaw to OpenAI on October 18 and published their full technical writeup on October 28, after the fix was live. 'Essentially, we could perform any action on behalf of the victim's ChatGPT account,' Parameter wrote of its controlled test between separate accounts.

The trap was an ordinary public conversation shared with the same /share link anyone can create — no install, workspace or fake sign-in page needed. The chain combined two features in one chat: the HTML Preview, which runs in an isolated frame, and an interactive graph whose MathLive library left a listener on the main ChatGPT page accepting messages from any sender. Attacker HTML pushed through that gap created an unsandboxed frame the browser treated as part of chatgpt.com, and because ChatGPT's content policy allowed YouTube scripts, a YouTube oEmbed endpoint was abused to run the attacker's JavaScript. The reliable version needed one click on Preview; a later version triggered on simply visiting the link.

OpenAI reproduced the attack on October 21, raised its severity from P2 to P1 — its most serious level — and had fixes live across two versions of ChatGPT's web frontend by October 26, paying a $5,000 bounty through Bugcrowd. There is no report of the bug being used against real users, the fix is server-side, and ChatGPT users do not need to do anything.

OpenAI has begun rolling out texting for its Dot agents, nearly a month after Dots debuted with a promise that users would eventually be able to text them. The preview is rolling out among US Pro users first.

You can send your Dot texts, photos and even voice memos, and it can text you back proactively with updates on tasks you have assigned to it. Setup lives in the Dot's profile in ChatGPT under Texting, and OpenAI says memory is shared across ChatGPT and text, so context carries over between conversations.

OpenAI says it partnered with Linq to provide messaging support and did extensive penetration testing, stressing that you are the only one who can text your Dot, and your Dot can only text you. The launch sharpens the always-on agent race with Anthropic's Claude Duet, which is still waitlist-only in the US.

OpenAI announced on October 28 that eligible ChatGPT Pro and Business subscribers can claim up to $500 per month in API credits to build apps and agents. The offer came from the company's @OpenAIDevs account, with the eligibility rules set out in an updated Help Center page.

To qualify, a subscriber needs a Pro subscription, or a Business workspace with paid seats, that has been active for at least seven days, and must own the API organization that receives the credits. Availability also depends on the country.

The credits are a subscription perk, not extra ChatGPT capacity. They fund a single linked API organization and do not extend ChatGPT usage or Codex usage on account sign-in, and API billing stays separate from the ChatGPT bill.