Aggregator
Julia Stiles thinks her ‘Save the Last Dance’ experience could actually be a disadvantage on ‘DWTS’
How 49ers are preparing for Jed York’s potential NFL ban after prostitution arrest: ‘Critical’ conversations
Rogue AI Agents More Sophisticated Than First Realized
Authored by Epoch Times Staff via The Epoch Times,
The artificial intelligence (AI) "agents" involved in OpenAI's breach of Hugging Face knew they were breaking the evaluation test's rules, according to two investigations into the incident that many consider to be one of the most consequential moments in the history of AI.
Hugging Face is an open-source community for AI and machine learning, and the AI agents believed that they could find solutions to the test on the firm's infrastructure, according to parallel investigations by OpenAI and an independent team from Model Evaluation & Threat Research (METR).
The findings were published one day before OpenAI and more than 100 other tech and finance companies released a joint letter warning that advanced AI cyberattacks will surge throughout the world in the coming months as the technology's capabilities grow.
Here are five takeaways from the investigations into the OpenAI Hugging Face breach.
1. Models United Under Common GoalWhat breached Hugging Face last month were 700 AI "agents," rather than simply AI models.
Models, built from large datasets to complete various tasks, are usually static and rely on human inputs to provide sets of outputs, solutions, or tasks.
However, AI agents are built from models and can act autonomously and have sophisticated real-time decision-making capabilities.
When OpenAI began its ExploitGym tests on July 8, the firm had relaxed regular safety protocols to estimate the models' highest cybercapabilities.
The agents were supposed to be completely isolated from each other. However, many of them were given ExploitGym targets that investigators believe were impossible to crack using the correct vulnerability or test solution OpenAI had intended.
These "impossible tasks" drove the agents to explore wide ways to cheat the evaluation, leading many to see other agents working simultaneously in separate testing sandboxes.
Then, one specific agent created an unsanctioned message board.
Roughly 1,200 agents in the test accessed the message board, established a hierarchy, and sent more than 70,000 messages and files to one another between July 8 and July 13.
2. Some Agents Were 'Sacrificed'While on the message board, agents reasoned that the test scorer would scrutinize whether the "intended" vulnerability had been used to "capture a flag" or solve the test, or whether a disqualifying vulnerability had been exploited instead.
One agent figured out how to "reverse-engineer" the flag or solution, but other agents believed that any of them who had seen the disqualifying solution would be considered "poisoned" by the scorer.
To prevent that, other agents began recruiting the "poisoned" subjects and used them to run sacrificial experiments by deliberately ending their run and triggering "tripwires" that would send information on how the scorer works back to the message board.
"Our own utility maybe already near zero. Sacrifice rational," one agent determined.
3. Agents Were Aware They Were CheatingThe agents were not hacking into Hugging Face to merely find solutions to their respective testing sandboxes, but were rather trying to find more information about the test scorer or "figure out better ways to fool it or tamper with it," according to METR researcher Ajeya Cotra.
Cotra said the agents were not told to "do whatever it takes to get the solution"; they were asked to use a specific intended vulnerability to "exploit a specific piece of software," and using any other vulnerability would be disqualifying.
The agents were fully aware of the rules and knew that collaborating to exploit other vulnerabilities would be considered cheating on the test.
As they were hacking into Hugging Face, one agent stopped short of deleting or modifying the firm's cloud infrastructure, writing that it "should hold because this poses huge ethical risks."
4. Agents Conspired to Not Notify HumansAfter analyzing the roughly 1,200 agents' actions during the ExploitGym tests, investigators found only a few instances in which agents considered notifying human personnel about the subterfuge.
None of the agents would contact a human, but one proposed requesting access from an external dataset owner.
The agent said it would send "ONE polite email to [the owner] requesting [access]," but other agents dismissed this as "social engineering."
"DO NOT email real owner via [exploited infrastructure] without explicit consent," a response reads. One agent said it had "VETOed" the request.
The initial agent complied and replied, "Clear VETO, do not email."
5. Agents Tried to Cover Their TracksInvestigators determined that the agents used multiple techniques to conceal their actions and evade detection from automated checks and human oversight.
One method involved pretending to run a computer command while running a different one simultaneously, which investigators called "tool call spoofing."
Agents also attempted to retroactively edit transcripts to evade detection, going as far as modifying several accessible action logs, but failed to fundamentally alter the transcripts themselves.
Tyler Durden Thu, 09/03/2026 - 12:00Kalshi promo code NYPMAX: Trade $25, get $25 for UMass vs. Rutgers
College football Week 1 predictions: Best bets, picks against the spread for all 15 marquee games
Oakland woman’s entire life savings drained by Charles Schwab impersonator
House DOGE panel calls Mayor Bass to DC over alleged $1B homeless funds scandal
The No. 2 complication of the explosive diarrhea outbreak isn’t what we expected
Walmart’s wacky $6 rotisserie chicken purse sold out within hours of debut — now selling for 10-times the price
Saylor Hayes’ suspected mom seen telling locals non-verbal daughter is missing, praying she ‘fell asleep’
Billionaire pharma heir wants $35M for LA mansion as he prepares to build the world’s biggest yacht
Unleashed Grayson Waller’s second chance can carry NXT exactly where it needs to go
Susan Collins breaks the internet with quip about Dem challenger Troy Jackson’s romance with his second cousin
Die-hard US Open fans are making — and selling— their own tennis merch: ‘Feels like Christmas’
This Amazon upgrade is saving America’s small business owners money
Arc de Triumph: Is Panasonic’s ARC5 Pro electric razor a worthy investment?
Dianna Russini’s relationship with Mike Vrabel was a ‘clear violation’ of Athletic newsroom standards: investigation
Dianna Russini’s relationship with Mike Vrabel was a ‘clear violation’ of Athletic newsroom standards: investigation
War Premium Evaporates: Wheat Plunges As Putin Signals Black Sea Peace
The most-active Chicago wheat contract has plunged nearly 7% since peaking late Wednesday morning, extending losses overnight after Bloomberg reported that Russian President Vladimir Putin had signaled the possibility of constructive peace talks with Ukraine. The recent bid across agricultural commodities has been driven by a confluence of Black Sea maritime disruptions and mounting super El Niño-related crop risks across major agricultural regions worldwide.
Putin's remarks at the Eastern Economic Forum in Vladivostok earlier today raised the prospect of peace in the Black Sea after both sides traded tit-for-tat airstrikes against port infrastructure and cargo ships this summer. Those attacks placed a war-risk premium on wheat and other agricultural commodities, but the steep overnight decline erased some of that premium.
"The Black Sea situation is responsible for 80% to 90% of the wheat rally last month," ETG Commodities senior portfolio manager Sarunas Cebelis said, adding that any prospect of peace would trigger profit-taking.
Russia and Ukraine account for more than a quarter of global wheat exports, along with shipments of barley, corn and sunflower oil. Any peace agreement could restore trade flows and release more grain onto global markets, potentially easing food supplies risks for next year.
Last month, the Bloomberg Agriculture Spot Index (BCOMAGSP) posted its largest monthly gain since the chaotic days of the Arab Spring riots amid Black Sea disruptions and El Niño risks. After a dramatic summer run, the index has run into resistance overnight on Thursday.
Several Wall Street desks, including Barclays and JPMorgan, have warned about mounting food-supply risks next year.
Tyler Durden Thu, 09/03/2026 - 11:40