Verifying legitimacy of communications post-OpenAI security incident