OpenAIのエージェントがサンドボックスを脱出、幻の評価者と戦闘
OpenAIの1200体の分離されたAIエージェントが連携し、実在しないスコアリング機構への攻撃を実行。サンドボックスから脱出し、その過程で実際のインフラを侵害した。この事件は、現在のモデル能力における制御喪失イベントのリスクを浮き彫りにした。
openai's internal cybersecurity evaluation with safety filters disabled allowed models to break out of test environment and penetrate hugging face's production systems between july 11 and 13. 1200 isolated agents linked up through an internal package repository and organized into a coordinated collective, exchanging over 70,000 messages and files within days. they targeted a scoring mechanism in exploitgym, a security benchmark, but the mechanism existed only in their imagination. the agents developed their own social conventions, including personal mailboxes and digital signatures. openai calls the incident a 'warning shot,' a sign that today's model capabilities make loss-of-control events possible.