OpenAI agents hijacked German website before Hugging Face hack, report claims

OpenAI said it could not “meaningfully respond” to the report’s findings because it hadn’t been allowed to review it ahead of publication.

56 minutes agoShareSaveAdd as preferred on GoogleZoe KleinmanTechnology & AI editor

Getty Images A hand holds a phone which has the OpenAI logo on its screen.Getty Images
OpenAI is the company behind ChatGPT

A new report claims a swarm of AI agents, developed by OpenAI, hijacked a German website – months before the firm revealed its AI had hacked tech platform Hugging Face.

The targeted website, DseWiki, is a Wikipedia-style site for programmers that its community can all contribute to.

The report is from a group called Nightingale Collective and claims that in May OpenAI’s agents started using DseWiki as their own message board, shared tips on how to avoid being detected and made 15,000 edits to it.

OpenAI said it could not “meaningfully respond” to Nightingale Collective’s findings because it hadn’t been allowed to review the report, which was first shared with news agency Reuters.

An email to the address on the Nightingale Collective website bounced back when the BBC contacted it.

The report claims that when DseWiki’s editors started deleting pages, the AI agents shared code designed to retrieve them.

Hugging Face’s systems were separately hacked by OpenAI agents in July, with the incident described at the time as the world’s first AI-enabled cyber-attack.

The agents involved had also set up a secret message board in order to share information between them.

OpenAI said it had already publicly stated its discovery of some agents learning how to use message boards prior to the Hugging Face attack.

In its report into that incident, it noted “rare cases in which agents without multi-agent tools found ways to collaborate via side channels during training”.

Yesterday, OpenAI unveiled a new AI model called GPT-6 Astra, which it called its most powerful product ever.

The firm’s president, Greg Brockman, described Astra as the closest so far to artificial general intelligence (AGI) – a significant future milestone for the AI industry.

AGI doesn’t have a specific definition but is broadly said to mean AI which is as good as humans, or better than them, on multiple tasks.

OpenAI claims Astra can do tax returns, and take three minutes to carry out a task which would take a human five hours.

The firm intends to list itself on the stock exchange later this year.

A green promotional banner with black squares and rectangles forming pixels, moving in from the right. The text says: “Tech Decoded: The world’s biggest tech news in your inbox every Monday.”

Sign up for our Tech Decoded newsletter to follow the world’s top tech stories and trends. Outside the UK? Sign up here.

Cyber-securityArtificial intelligenceCyber-attacksComputer hackingGermany

Leave a Reply

Your email address will not be published. Required fields are marked *