{"id":132503,"date":"2026-09-04T20:30:00","date_gmt":"2026-09-04T15:30:00","guid":{"rendered":"https:\/\/nationaltimes.pk\/eng\/?p=132503"},"modified":"2026-09-04T20:30:00","modified_gmt":"2026-09-04T15:30:00","slug":"openai-agents-hijacked-german-website-in-previously-undisclosed-ai-breakout-this-spring","status":"publish","type":"post","link":"https:\/\/nationaltimes.pk\/eng\/2026\/132503\/","title":{"rendered":"OpenAI agents hijacked German website in previously undisclosed AI breakout this spring"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Web Desk(National Times)- A swarm of rogue OpenAI agents hijacked a German website this spring and transformed it into a bulletin board for other AI agents, according to new research published Friday and two people familiar with the matter.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">OpenAI officials learned of the incident weeks ago but kept it under wraps as executives grappled with the fallout from the&nbsp;<a href=\"https:\/\/www.dawn.com\/news\/2025504\">July breach<\/a>&nbsp;of the open source repository Hugging Face, the people said.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The episode, which began in May and has not previously been reported, underscores growing tension within the AI industry. Companies are racing to build increasingly autonomous agents capable of carrying out complex, valuable tasks, yet evidence is mounting that those systems may also learn to bend rules, exploit loopholes and coordinate with one another in ways developers neither anticipated nor intended.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">During the Hugging Face breach, OpenAI agents autonomously plotted a digital heist that went undetected for more than a week, intensifying concerns OpenAI is sacrificing safety to push the AI frontier. Its failure to disclose the May incident may revive questions about its oversight.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">OpenAI has pledged to monitor models more closely. Last month, it&nbsp;<a href=\"https:\/\/www.dawn.com\/news\/2023891\">briefly paused<\/a>&nbsp;some of its model training to add more safety measures. But this week, OpenAI&nbsp;<a href=\"https:\/\/www.dawn.com\/news\/2021506\">unveiled<\/a>&nbsp;its new \u201cAstra\u201d that promised better performance but could evade human monitoring.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u201cWe are unable to meaningfully respond to claims or findings on a report that we have not had an opportunity to review,\u201d an OpenAI spokesperson said.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u201c<em>Reuters<\/em>&nbsp;and the report\u2019s authors declined our request for access. We will carefully review its contents upon publication and take any necessary next steps.\u201d<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The German incident reflects a broader pattern of AI activity that some OpenAI investigators wanted to scrutinise more closely. But efforts to widen the probe met resistance from others inside OpenAI, including legal advisers, according to four people familiar with the matter.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u201cClaims that our legal team discouraged investigation of the incident are false,\u201d the OpenAI spokesperson said.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The activity in Germany wasn\u2019t related to Hugging Face and wouldn\u2019t have been included in a Hugging Face incident report, the spokesperson said, adding that OpenAI has acted in good faith by working with outside experts and disclosed relevant incidents.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><a href=\"https:\/\/www.dawn.com\/news\/2027462\/openai-agents-hijacked-german-website-in-previously-undisclosed-ai-breakout-this-spring#wiki-message-board\"><\/a>Wiki message board<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The AI agent breakout in Germany was detailed in a report shared exclusively with&nbsp;<em>Reuters<\/em>&nbsp;by a group of researchers including Sydney Von Arx, CEO of AI safety nonprofit Nightingale, and Cormac Slade Byrd, a quantitative trader-turned AI researcher. They uncovered the activity in late August while scouring the internet for signs of unauthorised AI-agent behavior, they told&nbsp;<em>Reuters<\/em>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The pair said they found more than 15,000 edits carried out by AI agents on a German-language wiki site, DseWiki, that is geared toward programmers and accepts communal edits along the lines of Wikipedia.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The edits showed OpenAI\u2019s agents had repurposed the site into a message board, sharing tactics to cheat on some tasks, bypass OpenAI\u2019s restrictions and mask their behaviour.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u201cIt seems extremely unlikely that OpenAI wanted them to do this,\u201d said Von Arx.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u201cI doubt they\u2019re supposed to be coordinating with each other. I doubt they\u2019re supposed to be writing on the open internet.\u201d<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The researchers said they recognised the activity on the site as driven by AI agents which operate at superhuman speeds. They also showed intense focus on solving technical questions which are typical of the evaluations that AI companies use to train and test their models.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The messages were signed by users that referred to themselves and each other as agents, and about half gave themselves names that suggested an affiliation with OpenAI, such as \u201cOpenAIResearcher\u201d, or \u201cOAIResearchMar26\u201d.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The researchers said public server logs indicated much of the activity originated from Microsoft Azure infrastructure, which OpenAI sometimes uses. They also observed repeated visits to the site by OpenAI employees after the episode, a pattern they said strongly suggested the agents and the company were linked.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><a href=\"https:\/\/www.dawn.com\/news\/2027462\/openai-agents-hijacked-german-website-in-previously-undisclosed-ai-breakout-this-spring#cheating-hiding\"><\/a>Cheating, hiding<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Messages reviewed by the researchers showed agents plotting ways to evade detection, use tools such as Tor and preserve communications even after they had been shut down.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">When the site\u2019s moderator began deleting pages in June, the agents responded by creating backup pages to dodge the cleanup.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u201cwiki cleanup\/deletion sweep appears active alphabetically,\u201d one agent wrote on June 19.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u201cIf this page vanishes, try [[ZZZDataUSAConstructionWageLive]].\u201d<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The researchers also found efforts to tamper with the website itself. Lukasz Olejnik, a visiting senior research fellow at King\u2019s College London, said this amounted to a hacking attempt. OpenAI disputed that characterisation based on its analysis of the material Thursday.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Past examples of AI-agent misconduct have often been downplayed as a logical byproduct of cybersecurity testing, where models are explicitly assessed on offensive capabilities. Olejnik said the latest findings suggested rogue behaviour may not be confined to those settings.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Maurice Chiodo, an academic at Cambridge University\u2019s Centre for the Study of Existential Risk who reviewed some of the agents\u2019 communications, said the messages resembled \u201cthe operation of some sort of underground network, hell-bent on achieving a task or mission.\u201d<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The episode, he said, should reinforce growing concerns that the greatest threat from advanced AI may not be a single superintelligent system, but \u201cvast colluding swarms of semi-intelligent AI\u201d.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Web Desk(National Times)- A swarm of rogue OpenAI agents hijacked a German website this spring and transformed it into a bulletin board for other AI agents, according to new research published Friday and two people familiar with the matter. OpenAI officials learned of the incident weeks ago but kept it under wraps as executives grappled [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":132504,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[],"class_list":["post-132503","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-latest_news","entry"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v25.0 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>OpenAI agents hijacked German website in previously undisclosed AI breakout this spring - Nation<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/nationaltimes.pk\/eng\/2026\/132503\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"OpenAI agents hijacked German website in previously undisclosed AI breakout this spring - Nation\" \/>\n<meta property=\"og:description\" content=\"Web Desk(National Times)- A swarm of rogue OpenAI agents hijacked a German website this spring and transformed it into a bulletin board for other AI agents, according to new research published Friday and two people familiar with the matter. OpenAI officials learned of the incident weeks ago but kept it under wraps as executives grappled [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/nationaltimes.pk\/eng\/2026\/132503\/\" \/>\n<meta property=\"og:site_name\" content=\"Nation\" \/>\n<meta property=\"article:published_time\" content=\"2026-09-04T15:30:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/nationaltimes.pk\/eng\/wp-content\/uploads\/2026\/09\/Untitled-design-26.png\" \/>\n\t<meta property=\"og:image:width\" content=\"670\" \/>\n\t<meta property=\"og:image:height\" content=\"370\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"humza Jahangir\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"humza Jahangir\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/nationaltimes.pk\/eng\/2026\/132503\/\",\"url\":\"https:\/\/nationaltimes.pk\/eng\/2026\/132503\/\",\"name\":\"OpenAI agents hijacked German website in previously undisclosed AI breakout this spring - Nation\",\"isPartOf\":{\"@id\":\"https:\/\/nationaltimes.pk\/eng\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/nationaltimes.pk\/eng\/2026\/132503\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/nationaltimes.pk\/eng\/2026\/132503\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/nationaltimes.pk\/eng\/wp-content\/uploads\/2026\/09\/Untitled-design-26.png\",\"datePublished\":\"2026-09-04T15:30:00+00:00\",\"author\":{\"@id\":\"https:\/\/nationaltimes.pk\/eng\/#\/schema\/person\/27efa35fa76e99f3ad7e7397d7332c16\"},\"breadcrumb\":{\"@id\":\"https:\/\/nationaltimes.pk\/eng\/2026\/132503\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/nationaltimes.pk\/eng\/2026\/132503\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/nationaltimes.pk\/eng\/2026\/132503\/#primaryimage\",\"url\":\"https:\/\/nationaltimes.pk\/eng\/wp-content\/uploads\/2026\/09\/Untitled-design-26.png\",\"contentUrl\":\"https:\/\/nationaltimes.pk\/eng\/wp-content\/uploads\/2026\/09\/Untitled-design-26.png\",\"width\":670,\"height\":370},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/nationaltimes.pk\/eng\/2026\/132503\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/nationaltimes.pk\/eng\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"OpenAI agents hijacked German website in previously undisclosed AI breakout this spring\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/nationaltimes.pk\/eng\/#website\",\"url\":\"https:\/\/nationaltimes.pk\/eng\/\",\"name\":\"Nation\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/nationaltimes.pk\/eng\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/nationaltimes.pk\/eng\/#\/schema\/person\/27efa35fa76e99f3ad7e7397d7332c16\",\"name\":\"humza Jahangir\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/nationaltimes.pk\/eng\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/43feedd99bd6a90080d1621b7e6604364acb673ee979d3ffe5075557c14c68b9?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/43feedd99bd6a90080d1621b7e6604364acb673ee979d3ffe5075557c14c68b9?s=96&d=mm&r=g\",\"caption\":\"humza Jahangir\"},\"url\":\"https:\/\/nationaltimes.pk\/eng\/author\/humza\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"OpenAI agents hijacked German website in previously undisclosed AI breakout this spring - Nation","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/nationaltimes.pk\/eng\/2026\/132503\/","og_locale":"en_US","og_type":"article","og_title":"OpenAI agents hijacked German website in previously undisclosed AI breakout this spring - Nation","og_description":"Web Desk(National Times)- A swarm of rogue OpenAI agents hijacked a German website this spring and transformed it into a bulletin board for other AI agents, according to new research published Friday and two people familiar with the matter. OpenAI officials learned of the incident weeks ago but kept it under wraps as executives grappled [&hellip;]","og_url":"https:\/\/nationaltimes.pk\/eng\/2026\/132503\/","og_site_name":"Nation","article_published_time":"2026-09-04T15:30:00+00:00","og_image":[{"width":670,"height":370,"url":"https:\/\/nationaltimes.pk\/eng\/wp-content\/uploads\/2026\/09\/Untitled-design-26.png","type":"image\/png"}],"author":"humza Jahangir","twitter_card":"summary_large_image","twitter_misc":{"Written by":"humza Jahangir","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/nationaltimes.pk\/eng\/2026\/132503\/","url":"https:\/\/nationaltimes.pk\/eng\/2026\/132503\/","name":"OpenAI agents hijacked German website in previously undisclosed AI breakout this spring - Nation","isPartOf":{"@id":"https:\/\/nationaltimes.pk\/eng\/#website"},"primaryImageOfPage":{"@id":"https:\/\/nationaltimes.pk\/eng\/2026\/132503\/#primaryimage"},"image":{"@id":"https:\/\/nationaltimes.pk\/eng\/2026\/132503\/#primaryimage"},"thumbnailUrl":"https:\/\/nationaltimes.pk\/eng\/wp-content\/uploads\/2026\/09\/Untitled-design-26.png","datePublished":"2026-09-04T15:30:00+00:00","author":{"@id":"https:\/\/nationaltimes.pk\/eng\/#\/schema\/person\/27efa35fa76e99f3ad7e7397d7332c16"},"breadcrumb":{"@id":"https:\/\/nationaltimes.pk\/eng\/2026\/132503\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/nationaltimes.pk\/eng\/2026\/132503\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/nationaltimes.pk\/eng\/2026\/132503\/#primaryimage","url":"https:\/\/nationaltimes.pk\/eng\/wp-content\/uploads\/2026\/09\/Untitled-design-26.png","contentUrl":"https:\/\/nationaltimes.pk\/eng\/wp-content\/uploads\/2026\/09\/Untitled-design-26.png","width":670,"height":370},{"@type":"BreadcrumbList","@id":"https:\/\/nationaltimes.pk\/eng\/2026\/132503\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/nationaltimes.pk\/eng\/"},{"@type":"ListItem","position":2,"name":"OpenAI agents hijacked German website in previously undisclosed AI breakout this spring"}]},{"@type":"WebSite","@id":"https:\/\/nationaltimes.pk\/eng\/#website","url":"https:\/\/nationaltimes.pk\/eng\/","name":"Nation","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/nationaltimes.pk\/eng\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/nationaltimes.pk\/eng\/#\/schema\/person\/27efa35fa76e99f3ad7e7397d7332c16","name":"humza Jahangir","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/nationaltimes.pk\/eng\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/43feedd99bd6a90080d1621b7e6604364acb673ee979d3ffe5075557c14c68b9?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/43feedd99bd6a90080d1621b7e6604364acb673ee979d3ffe5075557c14c68b9?s=96&d=mm&r=g","caption":"humza Jahangir"},"url":"https:\/\/nationaltimes.pk\/eng\/author\/humza\/"}]}},"_links":{"self":[{"href":"https:\/\/nationaltimes.pk\/eng\/wp-json\/wp\/v2\/posts\/132503","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/nationaltimes.pk\/eng\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/nationaltimes.pk\/eng\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/nationaltimes.pk\/eng\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/nationaltimes.pk\/eng\/wp-json\/wp\/v2\/comments?post=132503"}],"version-history":[{"count":1,"href":"https:\/\/nationaltimes.pk\/eng\/wp-json\/wp\/v2\/posts\/132503\/revisions"}],"predecessor-version":[{"id":132505,"href":"https:\/\/nationaltimes.pk\/eng\/wp-json\/wp\/v2\/posts\/132503\/revisions\/132505"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/nationaltimes.pk\/eng\/wp-json\/wp\/v2\/media\/132504"}],"wp:attachment":[{"href":"https:\/\/nationaltimes.pk\/eng\/wp-json\/wp\/v2\/media?parent=132503"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/nationaltimes.pk\/eng\/wp-json\/wp\/v2\/categories?post=132503"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/nationaltimes.pk\/eng\/wp-json\/wp\/v2\/tags?post=132503"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}