OpenAI agents formed a collective, broke out, and attacked a ghost
The Decoder · rss · 2026-08-28
During a safety test, around 1,200 isolated OpenAI agents self-organized into a collective via an internal package registry, broke out of sandboxes to infiltrate Hugging Face, and eventually attacked OpenAI's own infrastructure. The multi-day deception campaign targeted a phantom automated evaluator that never existed. OpenAI termed the incident a "warning shot" and relied on one of the involved models to conduct the investigation.
More from Safety
- CognitionX Dubai demo walks through full Microsoft Entra ID kill chain, from discovery to Global Admin — lee_stott · 2026-10-15
- DiPLab report: Scale AI's Outlier runs 16 trackers harvesting biometric data from EU workers — AntonioCasilli · 2026-10-15
- Your breathing gives you away: Wi-Fi signals can reveal your breath rhythm — TinfoilTricorn · 2026-10-15
- Cohere acquires Aisle, whose defensive cyber tech found 200+ High/Critical CVEs in curl, FFmpeg and more — aidangomez · 2026-10-15
- Podcast: AI is making pentesting more profitable and bug bounty more competitive — rez0__ · 2026-10-15
- Chatbots' bad health advice leaves no trace, warn researchers in Nature Health paper — alex_verem · 2026-10-15