[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"branding":3,"analytics":7,"article-openai-bans-china-linked-hacking-groups-from-its-ai-tools":10,"sections":41},{"siteName":4,"siteTagline":5,"publisherName":4,"contactEmail":6},"The Revision","Tech news, decoded.","editor@therevision.news",{"gaMeasurementId":8,"adsenseClientId":9},"G-ZW2MV82GYR","ca-pub-8533917693782264",{"article":11},{"id":12,"slug":13,"title":14,"dek":15,"body_md":16,"tags_json":17,"published_at":18,"created_at":19,"updated_at":20,"status":21,"review_note":22,"review_notes":23,"image_url":22,"persona_id":22,"persona_name":22,"section":30,"tags":31,"sources":36,"feedback":40,"feedback_at":22,"cost_usd":40,"total_tokens":40},4907,"openai-bans-china-linked-hacking-groups-from-its-ai-tools","OpenAI Bans China-Linked Hacking Groups From Its AI Tools","OpenAI banned accounts tied to Chinese state hackers who used its AI tools for vulnerability research, scripting, and translation.","OpenAI banned a cluster of accounts tied to Chinese state-linked hacking groups for using its AI tools to sharpen cyberattacks.\n\nThe accounts, tracked under names including Vixen Panda and Keyhole Panda, were publicly attributed to the People's Republic of China. OpenAI found they used its AI tools to support vulnerability research, write and troubleshoot scripts, and translate technical material. The company did not say which specific product was involved, only that the activity relied on its AI tools for these tasks. OpenAI says it identified the pattern and cut off access as part of its ongoing effort to track misuse of its models by threat actors.\n\nThis fits a pattern. OpenAI has published a string of similar takedown reports over the past two years, each showing state-linked actors using AI models for the unglamorous parts of hacking: writing boilerplate code, translating phishing lures, debugging exploits, rather than any novel AI-native attack technique. That is a more mundane threat than the science-fiction framing often attached to AI and cybersecurity. It matters because it shows AI companies becoming a routine part of state-sponsored operations' toolchains, whether they like it or not.\n\nBanning the accounts does not undo the research already done. It just means OpenAI would rather not be listed as a contractor.","[\"china\",\"cybersecurity\",\"openai\",\"threat-actors\"]","2025-06-01T00:00:00.000Z","2026-08-14T09:52:33.541Z","2026-08-14T09:52:45.357Z","published",null,[24],{"id":25,"reviewer":26,"round":27,"reason":28,"status":29},"editor-r1","editor",1,"Headline and dek specifically claim the accounts used 'ChatGPT,' but the source only says they used OpenAI's 'AI tools' broadly (which could include API access, not the ChatGPT product specifically) and the body itself avoids naming ChatGPT — align the headline\u002Fdek with the body's more accurate, unspecific phrasing or confirm ChatGPT specifically before publishing.","resolved","security",[32,33,34,35],"china","cybersecurity","openai","threat-actors",[37],{"name":38,"url":39},"OpenAI","https:\u002F\u002Fopenai.com\u002Findex\u002Fdisrupting-malicious-uses-of-ai-vixen-keyhole-panda",0,{"sections":42},[43,48,51,56,61,66,71,76,81,86,91,96,101,106],{"name":44,"slug":45,"count":46,"latest_published_at":47},"AI","ai",3293,"2026-08-20T04:00:00.000Z",{"name":49,"slug":30,"count":50,"latest_published_at":47},"Security",435,{"name":52,"slug":53,"count":54,"latest_published_at":55},"Policy","policy",210,"2026-08-19T09:32:27.000Z",{"name":57,"slug":58,"count":59,"latest_published_at":60},"Deals","deals",179,"2026-06-29T20:02:07.000Z",{"name":62,"slug":63,"count":64,"latest_published_at":65},"Hardware","hardware",140,"2026-08-19T18:25:42.000Z",{"name":67,"slug":68,"count":69,"latest_published_at":70},"Consumer Tech","consumer-tech",95,"2026-08-18T16:05:00.000Z",{"name":72,"slug":73,"count":74,"latest_published_at":75},"Science","science",90,"2026-08-19T18:41:02.000Z",{"name":77,"slug":78,"count":79,"latest_published_at":80},"Software","software",73,"2026-08-18T07:51:50.000Z",{"name":82,"slug":83,"count":84,"latest_published_at":85},"Dev Tools","dev-tools",69,"2026-08-18T04:00:00.000Z",{"name":87,"slug":88,"count":89,"latest_published_at":90},"Startups","startups",47,"2026-08-19T19:13:46.000Z",{"name":92,"slug":93,"count":94,"latest_published_at":95},"Gaming","gaming",41,"2026-07-09T04:00:00.000Z",{"name":97,"slug":98,"count":99,"latest_published_at":100},"General","general",33,"2026-08-18T22:18:13.000Z",{"name":102,"slug":103,"count":104,"latest_published_at":105},"Reviews","reviews",20,"2026-06-24T12:00:01.000Z",{"name":107,"slug":108,"count":109,"latest_published_at":110},"How-To","how-to",6,"2026-06-16T09:00:00.000Z"]