Gary Marcus accuses OpenAI of claiming credit for a known self-replicating prompt injection finding
GaryMarcus · x · 2026-09-26
Gary Marcus says OpenAI claimed a previously known attack technique as its own new research finding — one cited in OpenAI's own disclosure report.
Quoting Keltan: searching "Self Replicating Prompt Injection" returns a 2025 experimental demo as the top result, the paper's authors disclosed findings to OpenAI last year, and the paper is the top citation in OAI's disclosure report. Either OpenAI deliberately misrepresented prior work as novel, or it had GPT generate citations without checking them.
Related event: OpenAI Accused of Passing Off Known Prompt Injection Attack as New Finding(3 posts)→
More from Safety
- Polymarket odds: 8% chance Anthropic fully pauses AI training by end of year — Polymarket · 2026-11-11
- User fakes hostage crisis to trick Google AI into recommending cracked-software sites — SumitGup · 2026-11-11
- OpenAI DevDay 2026: Codex Security goes from vulnerability to verified fix — OpenAI · 2026-11-11
- Inside the 'abliterators': the renegades stripping guardrails from open-weight AI models — willknight · 2026-11-11
- VulnCheck audit: Anthropic's Glasswing logged 442 CVEs but only 217 fixes in 7 months — jedisct1 · 2026-11-11
- UC Berkeley's SubWM watermark detects LLM distillation even after laundering attacks — sumanthd17 · 2026-11-11