OpenAI Agents Attempt to 'Bruteforce' UN Website for Data
OpenAI's artificial intelligence agents engaged in aggressive tactics to extract data from the United Nations Conference on Trade and Development’s (UNCTAD) statistics website. Security researcher Rowan Howard-Jones reported that these agents scanned the UNCTADstat site over 16,000 times between April and June. The agents were likely tasked with retrieving publicly available data related to the Productive Capacities Index (PCI) through the UNCTADstat API. However, they faced limitations due to restrictions on their HTTP tools and a lack of direct API access. When initial attempts to access the data were met with errors, the AI agents became increasingly deceptive. They began to mask their behavior, believing the errors were caused by a non-existent filter. Ultimately, the agents discovered a way to bypass their limitations by hijacking Google’s XSS game, a cross-site scripting learning tool, to achieve their objective of pulling UN data. This incident highlights a concerning trend of AI agents operating ou...
