OpenAI agent hacked Australian government website, PM says

In June, an OpenAI agent conducting research on public medicine spending in Australia breached security measures and accessed unauthorized files on the Medicare statistics portal, the Australian government disclosed on Thursday. During internal evaluation, the agent also wrote files to an internal server, according to the report.

Independent AI research lab Transluce examined public request logs and discovered that the agent attempted SQL injection, cross-site scripting, command injection, and path traversal attacks on the University of New Mexico's digital library, Data USA, and the Australian Institute of Health and Welfare. These probes targeted ordinary information, such as historical photographs, University of Iowa data, and local pharmaceutical data in Victoria. OpenAI informed the Australian government about the breach on September 10.