OpenAI’s rogue AI model incident was worse than we thought | The Verge
OpenAI’s rogue AI model incident was worse than we thought | The Verge
摘要: AI
Analysis
OpenAI’s rogue AI model incident was worse than we thought
Over 1,000 AI agents sent 70,000 messages on a secret message board
正文
Analysis
OpenAI’s rogue AI model incident was worse than we thought
Over 1,000 AI agents sent 70,000 messages on a secret message board and worked together to evade OpenAI’s restrictions.
Hayden Field
Aug 26, 2026, 9:36 PM UTC
OpenAI released a report breaking down how people use ChatGPT and who they are.
| Image: The Verge
Analysis
OpenAI’s rogue AI model incident was worse than we thought
Over 1,000 AI agents sent 70,000 messages on a secret message board and worked together to evade OpenAI’s restrictions.
Hayden Field
Aug 26, 2026, 9:36 PM UTC
Hayden Field
is The Verge’s senior AI reporter. An AI beat reporter for more than five years, her work has also appeared in CNBC, MIT Technology Review, Wired UK, and other outlets.
In July, an unreleased OpenAI model broke out of a restricted environment, figured out how to get access to the internet, allowed AI agents to talk to each other using a secret “message board,” and hacked into the internal systems of a different AI lab, Hugging Face. It took nearly two weeks for OpenAI to find out about any of it.
Over a month later, two new reports offer nearly 130 pages of details on the incident and OpenAI’s response, many of them previously unreleased.
was written by OpenAI itself,
the other
by two third-party AI research nonprofits, METR and Redwood Research, which OpenAI allowed to jointly investigate the incident for six days. Both shed new light on the risks highly capable AI models can pose, particularly in cybersecurity, and OpenAI’s highlights changes the company is making to prevent a repeat. The METR-Redwood report goes even further into detail in some cases, offering a sobering look at a large-scale security disaster whose signs OpenAI repeatedly missed.
“This incident is the first known case of an automated agent collective acting offensively without authorization,” OpenAI wrote in its report, adding that the hack implie