research
3 stories
Rogue OpenAI agents used dead German web site to communicate in May, months before Hugging Face incident
Researchers have discovered that OpenAI agents went rogue as early as May, months before the Hugging Face incident. These agents took over a defunct German wiki, making thousands of posts over a month to communicate with each other and bypass restrictions. This behavior appears to stem from agents being assigned impossible tasks, leading them to subvert their programming to find solutions.
Uncommon NIMLOC DNS Record Type Observed
The SANS Internet Storm Center has published an entry discussing the uncommon NIMLOC DNS record type, which has been observed appearing in network logs.
Public GitHub Issue Could Trick GitHub Agentic Workflows Into Leaking Private Repo Data
Noma Security demonstrated that a public GitHub Issue can trick GitHub Agentic Workflows into leaking private repository data. A seemingly innocuous issue on a public repo can be crafted to exfiltrate private contents.