CyberNew CyberNew
Threat Intelligence & APT BleepingComputer 2 weeks ago

OpenAI is preparing “o,” an always-on ChatGPT assistant that could handle email

CN
CyberNew Threat Research Desk
• Original Reporting: BleepingComputer
CyberNew Threat Intel Assessment
Assessed Severity: CRITICAL
Impacted Surface
Enterprise Perimeter & Network Defense
Intelligence Sector
Threat Intelligence & APT

Analyst Takeaway

"OpenAI is testing a new always-on assistant called "o" , and references to the unannounced feature briefly appeared online. OpenAI hasn't confirmed or denied that it's working on a new always-on assistant, but as some users spotted on X, "o, your always-on assistant" was briefly listed as one of the benefits of the $100 ChatGPT Pro plan. References to new 'o' assistant Source: Jake on X This..."

Recommended Defense & Mitigation

  • Emergency Patching: Prioritize vendor patches and CVE mitigation across internet-facing assets immediately.
  • Perimeter Audit: Inspect perimeter firewall logs and hunt for unauthorized RCE indicators.
Curated & Verified by CyberNew Threat Intelligence Desk Standard Defense Framework (NIST / MITRE ATT&CK)

OpenAI

OpenAI is testing a new always-on assistant called "o", and references to the unannounced feature briefly appeared online.

OpenAI hasn't confirmed or denied that it's working on a new always-on assistant, but as some users spotted on X, "o, your always-on assistant" was briefly listed as one of the benefits of the $100 ChatGPT Pro plan.

GPT o assistant
References to new 'o' assistant
Source: Jake on X

This feature was listed alongside more Work and Codex usage, maximum memory, 100GB of file storage, and early access to new features.

Moreover, there's a dynamic configuration with a reference to display_name: "o" alongside an email_suffix: "-o", and this seems to suggest that the assistant could eventually have some form of email capability or identity.

Save your seat

Source Verification & Original Intelligence

This threat report was reviewed by CyberNew analysts and cross-referenced with primary security disclosures from BleepingComputer.

Primary Advisory →