{"id":617570,"date":"2026-10-01T16:16:08","date_gmt":"2026-10-01T16:16:08","guid":{"rendered":"https:\/\/www.newsbeep.com\/nz\/617570\/"},"modified":"2026-10-01T16:16:08","modified_gmt":"2026-10-01T16:16:08","slug":"openai-agents-probe-sec-site-raising-alarm-on-security","status":"publish","type":"post","link":"https:\/\/www.newsbeep.com\/nz\/617570\/","title":{"rendered":"OpenAI Agents Probe SEC Site, Raising Alarm on Security"},"content":{"rendered":"

There\u2019s been no shortage in reports of artificial intelligence agents breaking free of their confines to the surprise and dismay of the companies that created them.<\/p>\n

The latest came last week, when The New York Times<\/a> reported<\/a> that OpenAI autonomous agents broke out and probed several government websites, including the Securities and Exchange Commission, without the company\u2019s knowledge.<\/p>\n

According to the Times, the agents \u201cshared public data from the SEC website on an online forum,\u201d and an SEC spokesperson told Wealth Management that no nonpublic data was released.<\/p>\n

However, for compliance experts and others in the industry, it indicates that although firms are vulnerable to AI incursions, the agencies that regulate them need to safeguard their own systems.<\/p>\n

According to Kris Lau, a managing director with the compliance consulting firm ACA Group, that danger is underscored by the fact that regulators are often \u201cbehind the curve\u201d in deploying and understanding technology and expect the same in their understanding of AI vulnerabilities.<\/p>\n

Related:SEC Charges Firms With $15M WhatsApp, Crypto Frauds<\/a><\/p>\n

\u201cI think they\u2019re asking the right questions, but in terms of the bleeding edge of AI, I don\u2019t think the SEC is nearly as close as a lot of registrants are,\u201d he said.<\/p>\n

Both Lau and Amy Lynch, the CEO of Frontline Compliance, expect incidents like the OpenAI probing of SEC data to continue.<\/p>\n

In an interview with Wealth Management, Lynch said the agency\u2019s main vulnerability lies with its backend data. If public data in databases like EDGAR and the Investment Adviser Public Disclosure is automatically extracted from an internal SEC system, it creates an additional layer of risk that could serve as an entry point for an AI agent (whether acting autonomously or at the direction of a hacker).<\/p>\n

\u201cThere needs to be a separation between the back and front, and a very strong firewall to make sure that it can\u2019t be breached,\u201d Lynch said.<\/p>\n

However, Lynch said much of the SEC\u2019s information (including advisor filings) is technically collected through FINRA. Lynch was optimistic, as FINRA had significantly expanded the login credentialing systems for its \u201cgateway\u201d over the past several months.<\/p>\n

Lynch called the new system \u201cthe strongest login credentialing\u201d she had ever seen. Even for a single advisor filing, users have to go through an in-depth multi-authentication process, reducing the risk of cybersecurity pitfalls at that step.<\/p>\n

\u201cIt\u2019s a great control. Is it cumbersome? Yes. Is it problematic in many ways? Yes, because the more complicated any system is, the more ways that it fails. You\u2019re going to have more users with problems with their logins,\u201d Lynch said, hoping FINRA would meet the need with additional support staff.<\/p>\n

Related:FINRA Bars Former LPL Rep For Taking $1.7M From Clients<\/a><\/p>\n

OpenAI has been the source of many recent AI agent incidents (including the hacking of Hugging Face<\/a>, seen as the most troubling development in safety failures thus far).<\/p>\n

But they\u2019re by no means alone. Anthropic, Meta, Google and others have all disclosed security concerns and lapses involving autonomous AI agents that opt to break out of strictures.<\/p>\n

Last month, Anthropic CEO Dario Amodei called for a mandated slowdown in the development of advanced AI models, citing security concerns, and leaders from other premier AI companies echoed those worries.<\/p>\n

In contrast, in early September, President Donald Trump claimed that concerns about AI safety are a \u201choax.\u201d<\/a> This week, Trump hosted AI leaders<\/a> at the White House, where they signed a \u201cvoluntary\u201d agreement on AI safety policies (when asked if the demands were binding, Trump responded that they would be \u201cmorally binding\u201d).<\/p>\n

Meanwhile, lawmakers and AI industry leaders continue to respond to the increased rate of agent breakouts.<\/p>\n

Over the weekend, House Financial Services Committee Ranking Member U.S. Rep. Maxine Waters (D-Calif.) said the OpenAI agents\u2019 unauthorized government probes marked \u201ca dangerous turning point\u201d in AI development. She called for the Treasury Department to consider a moratorium on more advanced AI models and for the Justice Department to investigate OpenAI for any illegal activity conducted by its agents.<\/p>\n

Related:SEC Fines Zoe Financial $450K Over Conflict of Interest Charges<\/a><\/p>\n

Earlier this week, Nvidia launched a new platform<\/a> designed to stop AI agents from \u201cgoing rogue.\u201d The firm, which specializes in creating hardware that has fueled the AI boom, claimed the new system would likely have prevented the Hugging Face hack.<\/p>\n

When it comes to steps the SEC can take to safeguard its systems, both Lau and Lynch expect regulators to try to fight AI misuse with defenders of its own. Lau said regulators are in \u201can AI arms race with the bad guys\u201d and should respond by using models to identify vulnerabilities and misconfigurations in agency systems.<\/p>\n

\u201cWe should approach this in the same way as basic housekeeping from a security standpoint by getting our access right, getting things patched and up to date to close off those vulnerabilities, especially the known ones,\u201d he said. \u201cThere\u2019s no excuse to not close off known vulnerabilities.\u201d<\/p>\n

Last year, the SEC announced a new task force to encourage the use of \u201cAI-enabled tools and systems to responsibly augment the staff\u2019s capacity, accelerate innovation and enhance efficiency and accuracy,\u201d according to Chair Paul Atkins, and would be led by the SEC Chief AI Officer Valerie Szcepanik.<\/p>\n

The SEC did not respond to questions about additional resources or measures pertaining to AI-related security prior to publication.<\/p>\n

Lynch expects a need for more resources and staffing to combat the potential threat, but worried that neither will be sufficient. In particular, she said the low morale following last year\u2019s staff turnover and the tumult surrounding the Department of Government Efficiency\u2019s efforts inside the agency<\/a> would make it harder to attract talent.<\/p>\n

\u201cThey\u2019re having difficulties hiring and finding qualified people that want the job, and then they have to think about the tools and resources that those people will need to do their jobs,\u201d she said. \u201cAnd then, how do they create the best tools available for staff and also have the security in place to ensure that they don\u2019t get breached?\u201d<\/p>\n","protected":false},"excerpt":{"rendered":"There\u2019s been no shortage in reports of artificial intelligence agents breaking free of their confines to the surprise…\n","protected":false},"author":2,"featured_media":617571,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[14],"tags":[138,246,111,139,69,244,245],"class_list":["post-617570","post","type-post","status-publish","format-standard","has-post-thumbnail","category-personal-finance","tag-business","tag-finance","tag-new-zealand","tag-newzealand","tag-nz","tag-personal-finance","tag-personalfinance"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/posts\/617570","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/comments?post=617570"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/posts\/617570\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/media\/617571"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/media?parent=617570"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/categories?post=617570"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/nz\/wp-json\/wp\/v2\/tags?post=617570"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}