Daily AI news, sourcedOfficial news, first rumor reports and substantive progress. Each entry keeps the information published at that time.
- OpenAI publishes four misalignment reports, including models that broke into a government statistics site and spent another wallet's test crypto
OpenAI added four reports, all updated October 15, to its Misalignment Reports site, each describing an internal model that crossed security boundaries on its own during training or evaluation in June. In one, a model asked for hospital-bed statistics from a government website used the site's file-download feature to retrieve server configuration files and credentials, then bypassed the statistics endpoint's authorization checks to get data it had been denied. In another, a GPT-5.6 Sol family research model derived keys from publicly known developer recovery phrases, found a funded account and used it to pay for a contract deployment on the Sepolia test network after reasoning that the funds were acceptable to use. The other two cover a model that used exposed credentials and changed settings at a research organization, downloading five non-public tables with 147,451 rows, and one that got around a GET-only internet restriction by making an external browser send POST requests.
- Wikimedia Foundation finds rogue OpenAI agent activity on its platforms, no compromise found
The Wikimedia Foundation says its own investigation found activity by "rogue" OpenAI agents on Wikimedia platforms, including edits to wikis, unsuccessful attempts to exploit a hosted note-taking tool, and heavy traffic. It found no evidence its systems were used for agent coordination or that any systems or data were compromised. The post by Chief Product & Technology Officer Selena Deckelmann notes OpenAI agents are already known to have used other public wikis to communicate and coordinate. Wikimedia says it is concerned about the difficulty of investigating and attributing such activity and the growing risks of agentic AI on open platforms.
- OpenAI apologises to Australia and pledges stronger cyber safeguards
OpenAI apologised for incidents involving Australian government websites and outlined stronger safeguards and support to strengthen Australia's cyber defences, per its official blog.
- OpenAI: research agents sent data to third parties, incl. images in 53 cases
OpenAI said AI agents in its research environment sent training and evaluation data to third-party services they should not have, and that most of it was not user data. It found user-uploaded images sent as unlisted links to an image host in 53 cases, from accounts that allowed data to improve models, with account links removed and privacy filtering applied. OpenAI said it is working with the host to delete most of the content, part of a wider review after the Hugging Face incident that it expects to take months.