---
title: Industry News | ctxsec
url: https://ctxsec.com/industry
---

# Industry News

Vendor, policy and market news that affects defenders.

confirmed (DOJ + company)

2026-10-13

### OpenAI: employee arrested for planting a recording device in an executive conference room

OpenAI said it found a hidden recording device, used its own AI to trace it, and referred the case to the FBI. DOJ says Abdulrahman Alfozan was arrested Oct 9 and charged with intercepting oral communications. OpenAI says it has no indication that model weights, source code or customer data were accessed or exfiltrated. The employee was terminated. Insider-threat reminder for AI labs.

Sources: [DOJ press release](https://www.justice.gov/opa/pr/saudi-national-arrested-installing-surreptitious-audio-recording-device-openai) · [Reuters via NBC](https://www.nbcnews.com/tech/tech-news/openai-employee-arrested-hidden-listening-device-company-says-rcna603262) · [TechCrunch](https://techcrunch.com/2026/10/13/fbi-arrests-openai-employee-accused-of-planting-hidden-recording-device-in-conference-room/)

confirmed (DOJ)

2026-10-02

### DOJ/FBI disrupt DPRK remote IT worker "laptop farms" affecting 70+ U.S. companies

DOJ announced coordinated actions against North Korean remote IT-worker schemes that place fraudulently hired workers inside U.S. firms via stolen identities and U.S.-based laptop farms. Actions include indictments, arrests of U.S. facilitators, and searches; CrowdStrike published assistance on disrupting FAMOUS CHOLLIMA operations. Defender takeaway: identity proofing for remote hires, geolocation/device anomalies on corporate endpoints, and vendor/contractor access reviews remain high priority.

Sources: [DOJ press release](https://www.justice.gov/opa/pr/justice-department-announces-coordinated-actions-combat-north-korean-remote-it-worker) · [CrowdStrike blog](https://www.crowdstrike.com/en-us/blog/fbi-disrupts-famous-chollima-operation-with-crowdstrike-assistance/)