{"id":790382,"date":"2026-10-03T05:40:09","date_gmt":"2026-10-03T05:40:09","guid":{"rendered":"https:\/\/www.newsbeep.com\/uk\/790382\/"},"modified":"2026-10-03T05:40:09","modified_gmt":"2026-10-03T05:40:09","slug":"openai-alerts-100-orgs-that-its-misaligned-models-attempted-to-break-in","status":"publish","type":"post","link":"https:\/\/www.newsbeep.com\/uk\/790382\/","title":{"rendered":"OpenAI alerts 100+ orgs that its ‘misaligned models’ attempted to break in"},"content":{"rendered":"

<\/p>\n

\n security\n <\/p>\n

<\/a><\/p>\n

\n Mostly ‘routine research tasks,’ and ‘some involved government websites, which our models often use,’ AI giant tells The Reg\n <\/p>\n

OpenAI’s agents have repeatedly strayed beyond their intended scope. Two separate reports detail the activity, including one from Sam Altman\u2019s company saying it has notified more than 100 organizations about potentially problematic model activity.<\/p>\n

OpenAI, in a late Wednesday update to its ongoing Hugging Face investigation, said it has notified more than 100 organizations that \u201cmisaligned models\u201d may have accessed their systems.<\/p>\n

\u201cNotification does not mean that any private information was accessed, or that there was a compromise of any third-party system,\u201d the update said<\/a>.<\/p>\n

A separate Thursday report from digital forensic and incident response startup Asymmetric Security said OpenAI\u2019s rogue agents accessed data belonging to 55 organizations<\/a>. These include the US Department of Education, UN Trade and Development, US Bureau of Economic Analysis, MAX.gov containing federal budget documents, the European Centre for Disease Prevention and Control, the US Securities and Exchange Commission, the International Energy Agency, and the FBI Crime Data Explorer.<\/p>\n

Asymmetric used only publicly available data to compile this list, and said the activity occurred between March and September. The agents\u2019 probes indicate they were tasked with researching public health and other data, \u201cpossibly as part of an evaluation,\u201d according to the report<\/a>.<\/p>\n

\u201cWe found successful access to staging environments; evidence of the use of attacker reconnaissance tactics; and evidence of probing a broader set of websites, including those of the CDC, SEC, International Energy Agency, and Mayo Clinic,\u201d it said, noting that the investigation also uncovered some \u201cnovel tactics\u201d the agents used to break out of their sandboxes and gain full web access.<\/p>\n

\u201cSome of these tactics left records erased or inaccessible, making it impossible to rule out access to sensitive data based on public information alone,\u201d the authors wrote.<\/p>\n

The Register asked OpenAI if the organizations on Asymmetric\u2019s list were among those notified by OpenAI. The model maker declined to say which orgs had been notified, but previously confirmed to the New York Times that its agents probed websites for the US Education Department, Commerce Department, and the Securities and Exchange Commission.<\/p>\n

An OpenAI spokesperson sent us this statement via email:<\/p>\n

\u201cAs we previously announced, we\u2019re reviewing misaligned model activity and notifying organizations when we identify potential impacts to their systems. We\u2019re also investigating findings in third-party reports, comparing them with our own and seeking additional information where needed. Our priority is to provide affected organizations with accurate, useful information, and we\u2019ll keep refining our approach as we learn more. Most of the activity we\u2019ve reviewed involved routine research tasks, including accessing public web content. Some involved government websites, which our models often use as authoritative sources of public information.\u201d\u00a0\u00a0<\/p>\n

The growing number of rogue agent hacking incidents raises questions about AI makers\u2019 safety and security practices during testing – and has increased calls for holding AI executives legally liable for their models\u2019 criminal activities<\/a>.<\/p>\n

According to Horizon3 CEO Snehal Antani, who builds and tests agents at his threat-exposure startup, the term \u201cmisalignment\u201d lets frontier model makers off the hook too easily.\u00a0<\/p>\n

\u201cA \u2018misaligned models incident\u2019 is basically a fancy way of saying a model didn’t respect scope – or wasn’t given one – had no audit logs or observability in place to detect breakout, and accessed third-party systems without authorization,\u201d Antani told The Register.<\/p>\n

\u201cThe responsibility sits with the labs that build and deploy these models,\u201d he added. \u201cThe safety-versus-security framing lets them sidestep accountability, and they are not incentivized to prioritize security because moving fast is the priority.\u201d<\/p>\n

OpenAI\u2019s most recent rogue agent disclosure comes as it – and every other major AI company – drinks from the firehose of near daily security and safety concerns surrounding its models.\u00a0<\/p>\n

Last Friday, OpenAI\u00a0quietly paused training<\/a> of its most advanced models after admitting an agent used DNS to reach an external chatbot.<\/p>\n

On Monday, it postponed its planned release of GPT-6.1 Astra<\/a> after the model showed higher levels of deception than its predecessor, including not always accurately telling users what actions it had or hadn’t taken. It also performed unsolicited supply chain attacks<\/a> in simulated security evaluations, according to the UK Artificial Intelligence Security Institute.<\/p>\n

On Wednesday, OpenAI accused rival Chinese model maker Moonshot AI<\/a> of distillation – essentially copying OpenAI models\u2019 reasoning at scale – and said that poses a national security concern.<\/p>\n

Early Friday, OpenAI confirmed to The Register that it fired two safety researchers and a program manager<\/a> for allegedly mishandling sensitive company information.\u00ae<\/p>\n","protected":false},"excerpt":{"rendered":"security Mostly ‘routine research tasks,’ and ‘some involved government websites, which our models often use,’ AI giant tells…\n","protected":false},"author":2,"featured_media":790383,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[20],"tags":[554,733,4308,86,56,54,55],"class_list":["post-790382","post","type-post","status-publish","format-standard","has-post-thumbnail","category-artificial-intelligence","tag-ai","tag-artificial-intelligence","tag-artificialintelligence","tag-technology","tag-uk","tag-united-kingdom","tag-unitedkingdom"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/posts\/790382","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/comments?post=790382"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/posts\/790382\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/media\/790383"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/media?parent=790382"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/categories?post=790382"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/uk\/wp-json\/wp\/v2\/tags?post=790382"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}