In today’s artificial intelligence (AI) era, much of the conversation on cybersecurity is rightly focused on the digital security and privacy risks posed by hackers maliciously misusing AI code (or AI models going rogue). But an alleged spying incident at OpenAI is a startling reminder that old-school surveillance tech can still be a serious threat.
According to a post from the Department of Justice (DOJ), the incident couldn’t really be simpler. The suspect is an OpenAI engineer – Abdulrahman Alfozan – who allegedly planted an audio recording bug in his employer’s executive conference room, the DOJ said.
Alfozan is a Saudi Arabian national in his 30s who also advised government agencies back home, according to The New York Times. The DOJ said he was charged with “using or endeavouring to use an electronic, mechanical, or other device to intercept oral communications.”
OpenAI explained a little more in a post on X. The company says it “discovered a sophisticated recording device that was hidden inside one of our offices” and that it then used “our models to understand the device and where it had come from, identifying that a specific employee had planted it a few days earlier.” They referred the matter to the FBI, and noted in the X post that the investigation is ongoing.
So far, so typical for high-stakes international corporate espionage, you may think, even if it involves one of the world’s leading AI firms.
But the gadget in question is actually the eye-opener here. He allegedly inserted a thumbdrive-sized audio recording device into the USB socket on the back of a TV used for presentations in OpenAI’s conference room. In other words, this wasn’t a James Bond-style remote laser mic reflecting off the conference room window.
Nope, it looks like it was just a tiny plastic slab with a USB plug, something a bit like any of the several you probably have near your workstation. We know this because there’s image-based evidence that appears to link Alfozan to the device, which you can see on news sites like NBC. According to the DOJ, the gizmo was designed to snoop on the sensitive discussions between OpenAI’s executives in their conference room.
If you think about it, the plan was quite brilliant.
Most smart TVs or monitors have a USB socket for reading video files from a drive, and they’re usually hidden way around the back next to the HDMI sockets and other interfaces that make smart TVs so useful. USB sockets typically supply a small amount of current to power the peripherals they’re connected to, so the bug probably didn’t even need a bulky battery. When’s the last time you looked behind your conference room’s smart TV or monitor?
If you’ve not kept up to date on your cybersecurity policies, now’s an excellent time to make sure everything is safely locked down against cyber threats, from software patches and updates to physically inspecting your hardware – including checking seemingly innocent office gadgets.
The incident should act as a striking reminder to everyone that cybersecurity isn’t just about ignoring suspicious phishing emails begging money to rescue a Nigerian prince, or about remaining wary of high-tech AI deepfake scams.
Sometimes physical device security matters too, and shouldn’t be overlooked when you conduct a cybersecurity audit or when you’re planning your long-term digital safety strategy. Your company may not be as valuable a target as OpenAI, but it’s still worth protecting your sensitive business information. – Inc./Tribune News Service
