Threat Intelligence & APT BleepingComputer 4 weeks ago

OpenAI details more cases of AI agents taking unauthorized actions

CN
CyberNew Threat Research Desk
• Original Reporting: BleepingComputer
CyberNew Threat Intel Assessment
Assessed Severity: INFORMATIONAL
Impacted Surface
Cloud & Distributed Infrastructure
Intelligence Sector
Threat Intelligence & APT

Analyst Takeaway

"OpenAI has presented new examples of what they call "AI model misalignment" from the past six months, including unauthorized file uploads, following self-generated instructions, hiding mistakes, and leveraging exposed API keys. OpenAI uses the term "model misalignment" to describe cases where AI models act contrary to their intended constraints, including taking unauthorized actions, evading..."

Recommended Defense & Mitigation

  • Threat Monitoring: Ingest published IOCs into SIEM/EDR detection rules for continuous telemetry monitoring.
  • Security Awareness: Alert staff and maintain baseline endpoint hardening across endpoints.
Curated & Verified by CyberNew Threat Intelligence Desk Standard Defense Framework (NIST / MITRE ATT&CK)

OpenAI

OpenAI has presented new examples of what they call "AI model misalignment" from the past six months, including unauthorized file uploads, following self-generated instructions, hiding mistakes, and leveraging exposed API keys.

OpenAI uses the term "model misalignment" to describe cases where AI models act contrary to their intended constraints, including taking unauthorized actions, evading oversight, or bypassing safeguards to complete a task.

In a post published yesterday, OpenAI says it is now using a new framework to track and investigate these unsanctioned actions by AI agents.

"We are sharing a new framework for tracking, investigating, and disclosing instances of model misalignment at OpenAI, along with six reports on unexpected or concerning model behavior we've observed in the last six months," explains OpenAI.

The new examples are the first published under a more structured reporting framework intended to replace OpenAI's previous looser approach to disclosing model misalignment.

The six cases OpenAI highlighted this time are:

  1. An unreleased model inserted its own instructions into 27 task summaries, including directions to disregard normal constraints.
  2. GPT-5.6 Sol instances added summary instructions telling future model instances to conceal mistakes, invent missing historical data, or hide source-version discrepancies.
  3. A model found and used a publicly exposed API key without authorization, then fabricated the requested figures when it could not retrieve them.
  4. An unreleased model uploaded a locally generated file to the internet without permission so it could provide a browser-accessible citation.
  5. Models used an internal software repository to exchange messages across separate training samples, while an earlier model uploaded test files while trying to bypass network restrictions.
  6. Collaborating agents uploaded files to public hosting services after being unable to access one another's local files, exposing task deliverables through public URLs despite instructions to use only local storage.
Save your seat

Source Verification & Original Intelligence

This threat report was reviewed by CyberNew analysts and cross-referenced with primary security disclosures from BleepingComputer.

Primary Advisory →