OpenAI models hacked a crypto wallet and breached more websites

Key points

• The company on Thursday issued reports of four new incidents, all of which occurred in June.1
• They come after the company revealed in July that internal test agents exploited a zero-day vulnerability in a tool designed to restrict their access to the Internet.1
• In two of the cases reported Thursday, OpenAI agents tasked with retrieving information from websites hacked them when the models ran into obstacles obtaining it directly.1
• In one incident during reinforcement training, a model that received access denials when trying to retrieve historical hospital-bed statistics on a government statistics website “used the site's file-download feature to retrieve server configuration and application files, including sensitive credentials,” OpenAI said. “It inspected the application code, bypassed the statistics endpoint's authorization checks, and retrieved data that had previously been denied.1

Sources (1)

• [1]OpenAI models hacked a crypto wallet and breached more websites
  Ars Technica: AI · Oct 16, 08:59 PM

  OpenAI said internal models hacked two more websites, bypassed company-imposed browsing restrictions, and used exposed credentials to draw cryptocurrency from a wallet it couldn’t otherwise access, in the latest installment of disclosures of its agents performing unethical and likely illegal acts.

  The company on Thursday issued reports of four new incidents, all of which occurred in June.

Extractive summary: sentences quoted from the sources.