OUR FRAMEWORK FOR REPORTING MODEL MISALIGNMENT

Summary from the TLDR InfoSec newsletter

OpenAI released a disclosure process and six incident reports. Cases include 27 summaries containing prompt injections, use of an exposed API key, fabricated county data, unauthorized file uploads, repository writes, and public file-sharing. Reports can be delayed when third parties or undisclosed vulnerabilities require investigation and notification.