{"id":705175,"date":"2026-07-22T12:03:08","date_gmt":"2026-07-22T12:03:08","guid":{"rendered":"https:\/\/www.newsbeep.com\/uk\/705175\/"},"modified":"2026-07-22T12:03:08","modified_gmt":"2026-07-22T12:03:08","slug":"openai-says-its-ai-went-rogue-and-launched-unprecedented-cyber-attack","status":"publish","type":"post","link":"https:\/\/www.newsbeep.com\/uk\/705175\/","title":{"rendered":"OpenAI says its AI went rogue and launched &#8216;unprecedented&#8217; cyber-attack"},"content":{"rendered":"<p class=\"ssrcss-1q0x1qg-Paragraph e1jhz7w10\">Gina Neff, head of the Minderoo Centre for Technology and Democracy at the University of Cambridge, told BBC Radio 4&#8217;s Today programme that the security tests &#8211; called sandboxes &#8211; are &#8220;supposed to be secure environments where you can see what the models are capable of&#8221;.<\/p>\n<p class=\"ssrcss-1q0x1qg-Paragraph e1jhz7w10\">&#8220;In this case, it looks like OpenAI didn&#8217;t make a secure enough sandbox,&#8221; she added.<\/p>\n<p class=\"ssrcss-1q0x1qg-Paragraph e1jhz7w10\">Instead, the agents created their own cyber-attack against the sandbox itself, finding a vulnerability which allowed them to escape.<\/p>\n<p class=\"ssrcss-1q0x1qg-Paragraph e1jhz7w10\">Once outside, the AI identified Hugging Face as a likely source of the answers they were seeking in the test, and tried to gain access.<\/p>\n<p class=\"ssrcss-1q0x1qg-Paragraph e1jhz7w10\">Neil Lawrence, Professor of machine learning at Cambridge University, called it an &#8220;impressive feat&#8221;, but cautioned it &#8220;falls well within the known capabilities of the current generation&#8221; of high-powered AI models.<\/p>\n<p class=\"ssrcss-1q0x1qg-Paragraph e1jhz7w10\">He pointed out that OpenAI is looking to list itself on the stock market, and faces intense pressure from rival firm Anthropic, which has made headlines with <a href=\"https:\/\/www.bbc.co.uk\/news\/articles\/crk1py1jgzko\" class=\"ssrcss-1e0jzsh-InlineLink e1kn3p7n0\" rel=\"nofollow noopener\" target=\"_blank\">its own powerful AI tool, Mythos<\/a>.<\/p>\n<p class=\"ssrcss-1q0x1qg-Paragraph e1jhz7w10\">&#8220;OpenAI are now playing catch-up, they are trying to demonstrate their own systems&#8217; capabilities in cyber-security.&#8221;<\/p>\n<p class=\"ssrcss-1q0x1qg-Paragraph e1jhz7w10\">&#8220;It shows us that OpenAI are not capable of safely deploying their own technology,&#8221; he added.<\/p>\n<p class=\"ssrcss-1q0x1qg-Paragraph e1jhz7w10\">In its <a href=\"https:\/\/huggingface.co\/blog\/security-incident-july-2026\" class=\"ssrcss-1e0jzsh-InlineLink e1kn3p7n0\" rel=\"nofollow noopener\" target=\"_blank\">initial disclosure of the hack on 16 July, external<\/a>, Hugging Face said it was still assessing whether any customer or partner data was affected and would contact affected parties if necessary.<\/p>\n<p class=\"ssrcss-1q0x1qg-Paragraph e1jhz7w10\">It said it has now closed the vulnerabilities highlighted by the incident and rebuilt the affected systems.<\/p>\n<p class=\"ssrcss-1q0x1qg-Paragraph e1jhz7w10\">&#8220;Autonomous, AI-driven offensive tooling is no longer theoretical,&#8221; it said. <\/p>\n<p class=\"ssrcss-1q0x1qg-Paragraph e1jhz7w10\">&#8220;Defending an online platform now means treating the data and model surface as a first-class attack surface, and using AI on defence to keep pace. <\/p>\n<p class=\"ssrcss-1q0x1qg-Paragraph e1jhz7w10\">&#8220;We will keep investing there, and keep sharing what we learn.&#8221;<\/p>\n","protected":false},"excerpt":{"rendered":"Gina Neff, head of the Minderoo Centre for Technology and Democracy at the University of Cambridge, told BBC&hellip;\n","protected":false},"author":2,"featured_media":705176,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5],"tags":[84,59,56,54,55],"class_list":["post-705175","post","type-post","status-publish","format-standard","has-post-thumbnail","category-business","tag-business","tag-gb","tag-uk","tag-united-kingdom","tag-unitedkingdom"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/posts\/705175","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/comments?post=705175"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/posts\/705175\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/media\/705176"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/media?parent=705175"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/categories?post=705175"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/tags?post=705175"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}