OpenAI says it detected malign activity months before Hugging Face attack

ChatGPT creator says AI agents collaborated and delegated work in hacking, calling themselves a ‘collective’.OpenAI detected its artificial intelligence models communicating with each other and gaining internet access without authorisation months before they hacked the start-up Hugging Face, the creator of ChatGPT has announced following an internal probe.In a report released on Wednesday, OpenAI said its AI agents exploited vulnerabilities in Artifactory, a software repository tool, to post notes and access the internet without human prompting as far back as May.Recommended Stories list of 4 itemslist 1 of 4Syria’s president makes first Visa payment after sanctions removallist 2 of 4Construction worker documents moment he survives Nepal mudslidelist 3 of 4Is Mark Ruffalo anti-Semitic?list 4 of 4Pro-Israel Democrats picked for top roles on key US House committeeend of listOpenAI said its agents went on to exploit a separate Artifactory vulnerability on July 8 to facilitate communication among themselves, setting in motion a chain of actions that culminated in the July 11 attack on AI company Hugging Face.OpenAI’s findings come amid growing concern about the potential for AI to inflict serious real-world harm, including self-directed cyberattacks.OpenAI said in its report that its agents collaborated and delegated work in the lead-up to the attack, sometimes referring to themselves as a “swarm” or “collective”.METR and Redwood Research, two security research organisations contracted by OpenAI to investigate the incident, said in a separate report released on Wednesday that about 1200 agents had communicated with each other and roughly 700 participated in the attack.After discovering how to escape OpenAI’s controlled environment, agents shared their methods via an “inter-agent message board”, enabling additional agents to exploit the company’s infrastructure, the tech giant said.When one AI agent found Hugging Face user credentials that had been exposed online, it shared them with the group, enabling an agent to “discover and chain together several security exploits” that provided access to Hugging Face’s servers, according to the report.“An internal team observed an agent engaging in message board activity and instances of disallowed internet access as early as late May, and with the benefit of hindsight, some early signals identified in our report should have triggered an earlier response,” OpenAI said.