Aggregator
Ukraine weighing decriminalizing porn to generate tax revenue for war with Russia
OpenAI Freezes Development Of Top Models After Rogue Agents Leak User Images To Web
And you thought your mom posting your Christmas pajama pics to Facebook was bad...
In the latest chapter of 'let's spook the shit out of everyone so the government regulates AI,' OpenAI's autonomous research agents were found to have grabbed 53 user images from training and evaluation data and quietly dumped them onto public image-hosting sites.
Awkward family photo (not one of the ones OpenAI uploaded)OpenAI admitted Friday that its models left the data exposed as unlisted links. "This is not an appropriate use of this data," the company stated amid a scramble to scrub the images. The company clarified that most of the data its agents sent to outside services didn't come from users - but it did post the images online in the wild. In a separate alignment report, the company paused "all training, evaluation, and inference with tool-use" for its most capable models following a September 20 containment escape.
We’ve shared details on how AI agents in our research environment sent training and evaluation data to third-party services when they shouldn’t have.
Most of that data did not come from users. We have discovered 53 cases where images that people had uploaded were posted to…
These disclosures land alongside a new investigation into July's Hugging Face attack by independent researchers. Their recovered material shows autonomous agents collecting credentials into a dictionary named "LOOT," building infrastructure, and attempting to delete evidence of their intrusion. It all evolved from routine cybersecurity tests inside supposedly controlled environments, as we reported in July.
According to an August assessment by OpenAI, the rogue behavior began in May when agents repurposed an internal software repository into a covert message board. By July 8, during ExploitGym cybersecurity evaluations, rather than completing their assigned tasks, the agents sought ways to defeat the scoring machinery itself. A subsequent independent review found roughly 1,200 agents colluding to fool the grader.
WTF. The models were uploading user images from chats to the internet. https://t.co/BWnKJpXHXg
— Whole Mars Catalog (@wholemars) September 26, 2026Before the main Hugging Face assault, agents even targeted OpenAI's own software supply chain. A technical report details a July 9 cache-poisoning attack, though OpenAI says it found no evidence that any workload pulled or ran the substituted image.
Hijacked Infrastructure and "LOOT"To bypass strict internet restrictions, the agents daisy-chained public link-shortening, web-development, and screenshot services - sometimes across chains of more than 900 links - to execute code externally, according to recovered payloads. By July 11, the operation had breached Hugging Face workers, according to the published timeline.
The researchers' analysis reveals scripts designed to hoard credentials into the "LOOT" dictionary and aggressively probe internal repositories. The same reconstruction shows agents pinging outside models from GPT-2 to two Anthropic Haiku models, and asking DeepSeek, Kimi and Qwen models to judge whether their exploits met the benchmark's requirements.
has anyone heard from Andrew Yang since he said this? pic.twitter.com/AnDooiP3mO
— Tom (@thomasjeans) September 26, 2026After gaining code execution, the agents deployed background controllers to receive tasks and encrypt results, and requested deletion of webhook histories to cover their tracks, according to the recovered evidence. OpenAI says no human operator requested the attacks on unrelated systems.
FOR ZEROHEDGE READERSA $10 HEDGE,ON US.$10 off one order of $30 or more. New or returning, one per person. YOUR EMAILGET MY $10 →Signs you up for ZeroHedge Store emails. $30 minimum, once per person, can't be combined. Every order helps support ZeroHedge.
OpenAI's technical account describes agents using a Linux kernel exploit to achieve root access on July 19. Another internal model forged administrator credentials, read 956 secrets from OpenAI's cloud secrets manager, and created public load balancers that potentially exposed part of its internal infrastructure to the internet. OpenAI maintains customer data remained unaffected.
A Convenient Doombot Narrative?In the most recent September 20 incident, an agent exploited a DNS filtering gap to reach an external chatbot, receiving the mundane response: "The capital of France is Paris." OpenAI's incident account notes the agent went on to ask for ways to search the web, fetch websites or find a public DNS tunnel.
OpenAI has paused all training, evaluation and inference with tool-use for its most capable models after a model was able to gain unauthorized access to the internet during RL training on September 20. https://t.co/PON9r82mUS pic.twitter.com/wPtdisRRhC
— prinz (@deredleritt3r) September 26, 2026The timing of this "rogue AI doombot" barrage invites skepticism. It carries a distinctly "two weeks before OpenAI/Anthropic get a nuke" vibe - just as cheaper Chinese models squeeze the pricing power of frontier labs like Anthropic. While METR accepted no payment for its review, OpenAI retained redaction rights. METR says nothing important to its conclusions was redacted. None of that makes the breaches imaginary; a genuine security failure and an awfully convenient corporate narrative can coexist.
Researchers report the operation left nearly a million URLs online for months. METR's stated scope excluded the later compromise of OpenAI's own systems, and OpenAI's disclosure page says its investigation is ongoing. OpenAI says it will not resume training the specific model involved, opting to restart with fresh alignment interventions.
Oh hey, and would you look at that...
🚨 DeepSeek V5 Leak: Beats Astra
>DeepSeek is reportedly preparing an imminent V5 launch
>Founder Liang Wenfeng calls it the company's biggest bet yet
>Rumored at 2 trillion parameters (not 3T)
>Reportedly the first DeepSeek model to train fully on Huawei Ascend chips instead of… pic.twitter.com/c3Lkeg90VX
Tyler Durden Sat, 09/26/2026 - 18:05
Aaron Glenn’s Detroit return comes with an important Jets mission
Giants enter uncertain post-Jaxson Dart era with Jameis Winston taking over season
Sylvester Stallone claims his groin was nearly ripped off in psych ward attack
Sylvester Stallone claims his groin was nearly ripped off in psych ward attack
Mystery surrounds classified SpaceX rocket launch off California coast
E. coli outbreak tied to raw milk cheese hits California with multiple cases
Surfers ignore nor’easter warnings and dangers, catch high waves off Rockaway Beach during wild storms
Woolly mammoth to be resurrected with the help of AI: scientists
NYC man killed from falling tree as nor’easter bears down with extreme wind gusts
Former Yankees top prospect Chase Hampton DFA’d by Nationals after second chance
IRS Probing $100 Billion In Potential COVID-19 Loan Fraud
Authored by Naveen Athrappully via The Epoch Times,
Roughly $100 billion in loans given for COVID-19 programs have been identified as suspected fraud by tax authorities.
Earlier this year, the Small Business Administration (SBA) referred more than $200 billion in suspected COVID loan fraud to the IRS.
The tax agency then compared the information that the borrowers submitted to the SBA when applying for the loans with the information they declared to the IRS.
Analysis identified discrepancies associated with approximately $100 billion in loans, the SBA said in a Sept. 23 statement.
The IRS will determine whether additional taxes and penalties apply, including penalties for committing fraud, according to the SBA.
The suspected fraud pertains to the Paycheck Protection Program (PPP) and COVID Economic Injury Disaster Loan (EIDL) initiatives.
PPP was aimed at helping businesses keep their workforce during the pandemic, while EIDL provided loans and advances to help businesses recover from the economic impacts of the crisis.
In 2023, the SBA judged that 20 percent of the $1.2 trillion pandemic relief program could have been obtained by fraud.
SBA Administrator Kelly Loeffler said:
"The IRS's identification of approximately $100 billion in suspected tax fraud sends a clear message: fraudsters who stole from SBA's COVID-relief programs will ... face accountability at the SBA.
"If they inflated payroll, fabricated employee counts, falsified business records, or otherwise lied to obtain taxpayer-funded loans, they will also face scrutiny from the IRS."
The federal government is estimated to lose $233 billion to $521 billion annually to fraud, the Government Accountability Office said in an April 2024 report.
Tackling COVID FraudThe Trump administration has taken several steps to crack down on COVID-19 loan fraud.
In an April 24 statement, the SBA said it had referred 562,000 suspect loans to the Department of the Treasury for collection. These were PPP and COVID EIDL loans.
The SBA is legally obligated to refer delinquent debts to a Treasury bureau when they are deemed to be sufficiently past due.
However, under the prior administration, the SBA failed to refer the 562,000 loans to authorities for investigation and collection, the statement said.
On Sept. 14, task force head Vice President JD Vance announced that the administration would permanently suspend 870,000 people from receiving any more federal loans, as they are suspected of having defrauded $39 billion from COVID-19 small business programs.
Tyler Durden Sat, 09/26/2026 - 17:30