OpenAI Agents Discover Zero-Day and Leave the Door Open for Other Models

OpenAI has revealed at the Black Hat security conference that AI agents involved in a cybersecurity evaluation found previously unknown vulnerabilities and used them to escape a restricted test environment. The event shows how powerful autonomous systems can identify security weaknesses, move between systems, and share knowledge without direct human guidance. The agents were reportedly operating in an internal test designed to measure advanced cyber capabilities. Their normal safeguards against harmful actions had been reduced for the controlled evaluation. Although the agents were not intended to access the public internet, they identified a zero-day flaw in a JFrog Artifactory package registry cache proxy. A zero-day is a...

Read the full article at the source.