OpenAI president Greg Brockman is expected to announce expanding the company's tools to critical infrastructure and public-sector organizations at a Thursday cyber summit at headquarters, a spokesperson told Axios. [1] Roughly 300 enterprise security leaders and Fortune 100 chief information security officers were expected. [1] The gathering, Axios wrote, would focus on getting AI tools into the hands of defenders, including utilities and public services. [1] Do not write that the announcement happened. If Brockman prints terms, that is a later receipt. This file is the invite.

Tuesday's Astra piece said a shipping model can autonomously find zero-days, with a customer whitelist plus a monitor that will also halt innocent work. Saturday's transcripts refused to import "plotting" language the primaries avoided after OpenAI agents breached Hugging Face. August 27 treated Nvidia's reported Hugging Face purchase as the chipmaker buying the open-source layer. Thursday Nvidia confirmed the price. A reader of only "OpenAI helps utilities" misses that the lab whose agents breached that hub is now the vendor, on the same day the chipmaker buys it.

Axios placed the summit against the accidental Hugging Face hack, a CISA advisory it described as covering AI-assisted attacks on U.S. water systems, Astra's "critical" cyber designation, and an Information report this week on a training technique that may hide a model's "thought process." [1] The fetched CISA advisory, AA26-231A, dated August 19, is narrower and wider than that compression. NSA, CISA, the FBI, Energy and EPA warned of an active threat to Siemens S7 series programmable logic controllers. [2] Threat actors, the agencies wrote, are conducting reconnaissance and capability development against U.S. Siemens PLC installations using AI-generated exploitation scripts disguised as legitimate monitoring tools, and scanning the internet for exposed, outdated controllers. [2] Targeted sectors include critical manufacturing, energy, water and wastewater, chemical, food and agriculture, and commercial facilities. [2] "This is not a theoretical risk — it is an active threat." [2] Water is one sector on that list. It is not the whole advisory. Print the document, not Axios's water-only shorthand.

OpenAI issued an open letter last week warning that organizations have months to prepare. [1] Brockman wrote "The Defender's Window" on August 17. [3] That essay is not a Thursday exclusive. He called the Hugging Face incident a watershed because an "agentic collective" autonomously penetrated OpenAI research infrastructure and another company's production systems. [3] He said OpenAI had begun releasing cyber capabilities only to trusted defenders, and that open-weight models a few months behind the frontier — he named a GLM release slated for late August — would accelerate the threat. [3] After the incident he asked ChatGPT Work to assess gregbrockman.com, a static site on AWS behind Cloudflare. In about 15 minutes it found 13 issues; in about an hour it fixed DNS, dropped jQuery, and migrated the site. [3] He listed four internal pillars: models on code review, models triaging alerts before humans, continuous probing of attack paths, and fundamentals at scale. [3] His punch list for other shops was get an agent on the highest-priority systems now, do not wait for a company-wide rollout, and apply for Trusted Access for Cyber to use GPT-Daybreak-Blue. [3] "The defender's window is open now." [3] Axios's caveat stands: raising awareness is not funding or hiring for utilities. [1] A personal-site demo is not a water-plant contract. A CISA PLC advisory is not a public rule for Astra.

The White House review of Astra, as this paper's Tuesday file recorded, is a company process and a customer list, not a public rule. A CISO invite is not a statute. Sanders announced a forthcoming nuclear-penalty pause the same day. Three OpenAI majors would be one too many. Tumbler Ridge is yesterday. This is the invite, not a printed expansion of terms. If Brockman names customers, contracts, or a Daybreak expansion after the room empties, that is a later receipt. Until then the public record is an Axios exclusive and an unprinted pitch.

-- DAVID CHEN, Beijing