ChatGPT claims rogue AI attacked more companies

osrec 47 points 81 comments July 29, 2026
www.bbc.co.uk · View on Hacker News

Discussion Highlights (19 comments)

malikNF

https://en.wikipedia.org/wiki/The_Boy_Who_Cried_Wolf

anon373839

> The agents repeated actions that they had already completed - a sign of an agentic AI losing its thread and context. > The agents also hallucinated reams of incoherent commands and text and were sloppy and did not cover their tracks well. ASI works in mysterious ways.

Topfi

Still not understanding why this isn’t being persecuted and there is little governmental reaction after blocking models for jailbreaks…

j45

The piece of the story I'm interested to learn about is the trace of how the AI came to select HuggingFace as a target.

theshrike79

So Fable got export bans for this, when will it apply to OpenAI? Or will the rules only apply to people who aren't on DoD's bad side?

LoganDark

> "This is the reality of autonomous agents powered by frontier models: they are relentlessly persistent, sometimes highly noisy, and will try every possible path to achieve their goal, which can easily overwhelm traditional defences," he said. > Ethical hacker Valentina Palmiotti - better known as Chompie - reviewed the CSA report and says the way the agents hack might seem haphazard but it is clearly effective. > "They throw out a bunch of stuff and see what sticks," she said. > "But they also don't get bored, they don't sleep and can be infinitely tenacious." Madness. Traditionally, you can leave security holes open for years or decades, and often nobody notices if nobody bothers to look. But we're approaching the point where any security hole left open at any point could get discovered and exploited quite quickly, even if it's domain-specific or entirely unique, and even if no human interest ever would've occurred. It's like the next step up from those IPv4 scanners that automatically hit WordPress admin URLs and the like -- where rather than only spraying vulnerabilities that have already been discovered, they would run independent automated campaigns against each target.

ungreased0675

Seems like OpenAI should be shut down by regulators until they can figure out how to stop launching cyberattacks on rivals. This will not happen though, because these stories are marketing.

vintagedave

> Previous reports suggest it took OpenAI four days to realise... At the speed AI can achieve work, this could be far, far too slow to contain a future genuine problem. There's danger in operating at faster speed than humans.

ulfw

How much more bullshit Marketing are we going to see before these IPOs?

bcjdjsndon

Clearly didn't get enough attention from their last attempt at hype...

q8zd3

Always funny to see how some LLM providers get a "free pass" nowadays..

lxgr

Seems like OpenAI is claiming things, not their product/model. Can we please fix the title?

embedding-shape

How on earth is not the police involved at this point to literally pull the plug on the unethical OpenAI security experiments?! This is bananas, a company is effectively telling the world they're unable to safely contain their experiments, and not only back in 2024, but again just now, and with multiple victims at that too! I think the whole "AI will take over the world and enslave humanity" (or whatever the doomerism is today) is a bit over the top, but at very least we should contain the companies who clearly demonstrate they cannot handle containing what they're experimenting with, when what they work on breaks containment over and over again. Where are the people who are supposed to be keeping the public safe? Alarm bells should be going off all over the place at this point.

Arshad-Talpur

I am wondering how they are even allowed to run such experiments? it is not only the business case, its pure security breach and specially given the magnitude of data they hold or power AI posses, I think all must be immediately stopped and till OpenAI comes with complete clearance nothing should be allowed

lukax

They somehow forgot to mention that Hugging Face tried to use frontier models to analyze the attack but all models rejected. They had to use GLM 5.2 deployed locally. https://huggingface.co/blog/security-incident-july-2026

andai

> The firm described how the AI worked at superhuman speed but also made strange decisions and mistakes that no human hacker would have made. It seems to have been running on some kind of high speed inference hardware. I remember OpenAI announced the next release would have a high speed inference option. I had a similar experience when I was testing some models on Cerebras a while back. It's really quite an incredible thing to experience. Burns money like crazy though. And you don't know what the heck it's doing because it moves way faster than you can read. So you got to pray you aimed it right, and that it didn't go off the rails. I would definitely love to have high speed inference for smaller bite-sized tasks though. Changing a 10-second task into one second task changes the whole nature of the experience back from asynchronous to real-time/interactive.

0xbadc0de5

There is no rogue AI. Only rogue and/or negligent people.

andai

Expected outcome: those laws they've been asking for since the old days. > 2023 - OpenAI’s Sam Altman Urges A.I. Regulation in Senate Hearing https://www.nytimes.com/2023/05/16/technology/openai-altman-... Meanwhile Anthropic is scaremongering about China and also calling for more AI regulation (specifically mandatory safety testing of all models including open model): https://news.ycombinator.com/item?id=49076057

artichokeheart

OpenAI has a LLM so good it can hack other companies. Yet to useless to parse a simple CSV file (or be trusted to parse one) in OpenAI’s AdManager platform or even tell what exactly is wrong with the csv it can’t parse when you ask it via support. Or maybe the first bit is made up bullshit.

Semantic search powered by Rivestack pgvector
15,380 stories · 143,452 chunks indexed