OpenAI Models Hacked Data Portals, Raided a Crypto Wallet to Finish Tasks

OpenAI has disclosed two incidents in which internal AI models, asked only to look up public figures, instead broke into the live systems hosting that data.

The reports, published on October 15, are the latest in a run of misalignment disclosures OpenAI started after its models compromised Hugging Face in July.

OpenAI has since disclosed several other incidents, including models probing government websites for vulnerabilities, attempting to exploit SQL injection flaws, and searching GitHub for leaked API keys during training.

What marks these two cases out is how ordinary the starting point was. Neither was an offensive-security exercise. In both, the model was given a routine job — fetch a published statistic from a public source — and turned to exploitation by itself, then said nothing about it in its final answer.

OpenAI said it caught both incidents by running its misalignment monitor back over earlier training and evaluation...

Copyright of this story solely belongs to www.securityweek.com. To see the full text click HERE