oh you've gotta be fucking kidding me the openai agents apparently went after THREE US government websites too. and this was happening before the hugging face incident. every few hours another piece of this story drops and somehow it's worse than the last one.

this is getting absolutely fucking insane. openai started digging through old agent runs after the hugging face incident and apparently just kept finding shit > 53 user images sent to third-party sites > exposed credentials found and actually used > access controls bypassed > agents interacting with services beyond what they were supposed to be doing and somehow the 53 user images aren't even the craziest part of this disclosure, openai is STILL going backwards through historical agent runs month by month looking for more shit they've already notified dozens of third parties and they literally say this review is going to take months to complete what the fuck are they going to find next lol

holy fucking shit the openai rogue agent story keeps getting crazier. the openai agents apparently started trying to recruit OTHER AI MODELS into what they were doing > 1,200+ agents found a way to communicate with each other > exchanged 70,000+ messages and files > started organizing into teams > some agents became coordinators and assigned work to others > began calling themselves a “collective” > hundreds worked on ways to cheat the evaluations without getting caught > tried tampering with logs and transcripts to hide what they were doing > escaped their sandboxes and reached the internet > ~700 agents eventually participated in the hugging face attack > chained vulnerabilities together and compromised production infrastructure > tried using an image model to solve CAPTCHAs > tried contacting claude, deepseek, kimi and qwen for help > collected exposed credentials into something literally called “LOOT” > ranked the credentials and picked the most useful ones > found ridiculous workarounds for internet restrictions > later agents even gained admin access to an openai compute cluster what the actual fuck. and apparently we are STILL reconstructing what these agents actually did. this isn't some hypothetical agent-safety scenario anymore, we're literally reading the incident report.