Agregátor RSS

Australia’s Prime Minister Anthony Albanese has revealed an OpenAI agent “infiltrated an Australian government website” while trying to research medical statistics. Albanese said the incident occurred in June and involved an agent gaining unauthorized access to a portal that stores statistics related to Medicare, Australia’s national health insurance scheme. “The AI agent accessed both public and non-public files,” the PM said, before describing the portal as holding “non-sensitive Medicare information relating to data and statistics such as spending.” Australia’s Signals Directorate, a signals intelligence and cybersecurity agency, is investigating the incident. Albanese said the government currently believes none of its other systems were compromised, and that OpenAI’s agents did not access personal information. The PM described the situation as “obviously unacceptable” and said he spoke with OpenAI CEO Sam Altman – who is also attending the UN meetings – “to express Australia's extreme concern about this incident.” Albanese also “expressed my disappointment that it took the company way too long to inform the government what had occurred. The nature of the way that that notification occurred as well was unacceptable.” OpenAI told The Register it discovered the incident during the review of “misaligned behavior” it disclosed last week, and which led it to report six occasions on which its agents behaved unexpectedly and/or dangerously. “During this review, we identified activity involving several Australian government websites and services as our models attempted to look up answers, and available statistics for questions about Australia during an internal evaluation,” an OpenAI spokesperson told The Register by email. “In the course of that, our models took actions we did not intend.” “The information accessed included aggregate health statistics and internal file names,” the spokesperson added. OpenAI say the incident occurred in June, and that it notified Australia’s government on September 10. “During that time, we were validating and investigating the facts and what information had been accessed,” the spokesperson told The Register. We’ve asked OpenAI for more information about the incident, incuding whether this mess was one of the six examples of misaligment it revealed last week, and will update this story if we receive a substantial response. It is unclear why Albanese waited two weeks to disclose the incident, but ahead of the UN meeting Australia signed the Call for Control of Frontier AI Models, a 21-nation proposal for AI regulation. The PM is also using his visit to the UN to launch a bid for Australia to win a non-permanent seat on the United Nations Security Council. Australia last year used the UN meeting to promote its ban on children under 16 accessing social media. Albanese is widely expected to discuss his government’s proposed digital duty of care for tech platforms, which would require tech companies to avoid foreseeable harm to users, at this year’s meetings. The PM sees taking on Big Tech with strong regulations as a political winner, often linking the government’s actions to reducing the likelihood that children will self-harm. He often uses the phrase “we need to shape technology rather than allow it to shape us” to summarize his government’s policy. Every Australian has a Medicare account, the scheme is popular, and is a signature policy of Albanese’s Labor Party. OpenAI’s actions therefore give the PM a weapon to wield as he advocates for stronger regulation of tech companies. Albanese is trying to enact those regulations without scaring away investment. He had a win last week when Anthropic decided to become a long-term tenant of a 1.4GW datacenter cluster currently under construction down under. The PM faces criticism, however, over hints that in order to attract investment he may water down Australian copyright laws. Australia does not have the fair use exemptions that AI companies relied on to scrape content in other jurisdictions. Albanese has said any changes to copyright laws will embody two principles: creators “will have control over their intellectual property” and “any use needs to be monetized,” but hasn’t offered details on what that will mean. APRA AMCOS, an organization that represents Australian composers and musicians, last week criticized AI companies’ approach to gathering training data. "They have found the money for nearly every lobbying firm in Canberra. They have found the money for datacenters, power and Nvidia chips,” wrote CEO Dean Ormston. “But they have no intention of paying for the single most important ingredient in training and running a frontier large language model, which is creative content. And it isn't only Australia's IP they want. It's Australia and the world's IP, trained on in datacenters here without a single license agreement." ® UPDATED AT 2:15 AM UTC SEPTEMBER 24 to add news that OpenAI advised Australia's government of the incident by using the relevant agency's generic publicdisclosures@ email address rather than approaching government officials. That decision drew further criticism from Australian lawmakers. Prime Minister Albanese has also informed two of Australia's State goverments that OpenAI's agents also attacked their sites - a crime agency and a health department.

MikroTrick, 7.24, 7.24.2, 7.0.0, 7.23.4, 6.0.0, 6.49.21 - RCE

OpenAI published a detailed list of priorities and principles on Tuesday designed to govern its third-party model assessors, a list that industry observers agreed was a good one. But they also stressed that it lacked any enforceable controls to truly maintain safety.

If the goal is to encourage enterprise CIOs to trust OpenAI more, it won’t help, they said, but most doubted that this was OpenAI’s objective. Its more probable aim is to use the list to work out an arrangement with competitors and regulators so that enforcement is made more palatable, under the theory that it is open to stricter enforcement, but only if all of its key rivals are locked into identical restrictions.

The OpenAI post said, “OpenAI is committed to supporting independent assessments with deep levels of access across training, evaluation and deployment. That access should enable assessors to challenge our assumptions, identify risks we may have missed, and reach their own conclusions about the effectiveness of our safeguards.”

It added: “Third party assessments are most useful when they address specific, consequential questions: Does the evidence support a lab’s safety case and safety claims? Do evaluations adequately test the risks they are intended to measure? Do safeguards work under realistic conditions?”

Nothing about enforcement

Pieter Arntz, a malware intelligence researcher at Malwarebytes, said that giving third parties rules for engagement is certainly a good thing, but the implication behind such rules is that they are somehow enforceable. And the document says nothing about that enforcement process.

“It sets some useful expectations for independence and rigor, but it does not itself compel OpenAI to submit to a particular scope, publish adverse findings, or change deployment decisions,” he pointed out. “Its credibility will depend on the terms of individual assessments, and what outsiders are allowed to see. Its value therefore hinges on whether OpenAI accepts genuinely inconvenient scrutiny, and whether results, redactions, remediation, and deployment decisions can be independently checked.”

Valence Howden, advisory fellow at Info-Tech Research Group, agreed that the lack of enforceability makes the rules close to pointless. 

The document “doesn’t impose any requirements on OpenAI, and I would have been surprised if it did, because their motivations are not as clear-cut as they’re stating,” he said. “They also haven’t really identified what they will do based on the assessments, once they are conducted. OpenAI retains control over scope in that [OpenAI] must agree with it, limiting where assessors can go. They retain the ability to determine the appropriate level of access, which still allows them to filter what’s provided, impeding the gathering of direct evidence in those cases they define as material or classified. It also allows them to control much of the reporting and redact portions.”

Howden said the net impact is that “it’s good for determining what should be assessed, but considerably weaker on true clarity and approaches for how this is done.”

But Jason Andersen, principal analyst at Moor Insights & Strategy, offered a different perspective, although he reached the same conclusions as Howden and Arntz.

“It’s not an act of good faith to not empower these evaluators,” he said, but at the same time, CIOs need to understand the split personality of OpenAI today.

“It’s a classic problem with OpenAI because they are a split brain company, with the commercial side and the original mission side,” he pointed out. “Those two teams have not aligned very well over the past two years. It looks like it started with the original mission team, but then commercial interests took over that document and turned it into legalese.”

‘A principle instead of an excuse’

Frank Dickson, principal analyst at Dickson Research, concluded from the post that OpenAI “seems proactive in highlighting the threats posed by AI, but hesitant to accept accountability or take real action. This is a code of conduct for the assessors, not for OpenAI. The gap between the two is the whole story.”

He delved into the details of the document and was not happy. He pointed out, for example, that third-party assessor access was “granted within the bounds of legal, security, and IP constraints. That is a company deciding the scope of its own scrutiny.”

He also noted that the document specified that “publication happens after labs get a reasonable period to remediate issues. That is the same grace-period logic that just got Google criticized for sitting on the Gemini hacking disclosure for seven weeks, now written down as a principle instead of an excuse.”

Just the beginning

However, Samantha Gloede, global head of risk services at KPMG, said that she sees the document as the beginning of the process, and it should be evaluated accordingly.

“I believe the conversation will increasingly shift from assessment to accountability,” Gloede said. “Independent testing is important, but long-term trust depends on how organizations respond when material risks are identified. Stakeholders will want confidence not only that issues can be found, but that corrective actions are taken, independently validated and reflected in governance and deployment decisions. The next evolution of AI assurance will be demonstrating that accountability with the same rigor used to assess risk in the first place.”

Edna Conway, executive advisor at consulting firm Acceligence, agreed, noting that the substance of this effort will only become clear in the next phase. 

“The next step is making the lab accountable to the assessment process itself. Who determines when an assessment is required? ” she asked. “How much access is sufficient? What happens when the assessor and lab disagree about scope? Who sees a critical finding? Embracing independence is essential, as third-party assessments are genuinely valuable only when the assessor can ask uncomfortable questions, get sufficient access to answer them, follow evidence outside the original hypothesis when necessary, and report conclusions without commercial or organizational pressure shaping the outcome.”

This article originally appeared on CIO.com.

The "third-party.com" domain, commonly used as a placeholder in developer documentation and code examples, is serving a fake Cloudflare verification page that attempts to trick Windows users into executing PowerShell commands. [...]

Valorizaci penzí v příštím roce ovlivní tři novinky. Dvě z nich důchodcům přilepší, ta třetí je naopak nepotěší.

Nová regulace může změnit trh taxislužby v Česku. Města získají pravomoc zavést vlastní zkoušky pro řidiče, což může zvýšit náklady na provoz taxi a v některých místech omezit počet dostupných řidičů.

Fotka už dávno není jen obrázek ze snímače. Spolu s ní vzniká i balík dat, který říká, čím a jak vznikla, kde byla pořízena a co se s ní dělo dál. Podíváme se na vrstvy EXIF, XMP a C2PA.

O jazyku C se někdy s nadsázkou říká, že je to „přenositelný assembler“. Programy psané v C skutečně mohou být velmi efektivní, ovšem do značné míry záleží na kvalitě céčkového překladače a ještě více na vlastnostech mikroprocesoru.

Paměti s ULL profily jsou dražší, ale - jak ukazují nové testy - z hlediska poměru cena / minima FPS se některým uživatelům mohou vyplatit, zvlášť s ohledem na stávající ceny grafických karet…

Pokud funguje bránový model se skrytou temnou dimenzí a pokud vznikly primordiální černé díry, mohly by být všechny, co byly dostatečně malé, ve skutečnosti pětidimenzionální. To by zásadně ovlivnilo jejich vypařování, takže by mohly přežít od počátku vesmíru snad až do dnešní doby. Pokud ano, už možná máme stopu!

A new Android malware-as-a-service (MaaS) platform called RemControl is targeting users through malvertising campaigns that impersonate the TVTap IPTV application. [...]

Cybersecurity company Check Point has confirmed active exploitation of CVE-2026-85102, a pre-authentication remote code execution (RCE) vulnerability in the VPN certificate-handling functionality of its Security Gateway product. [...]

A September 23 advisory describes a flaw in the Python SDK used with MCP Toolbox: a shared cache could send a Google ID token to a service it was not meant for.

A September 22 advisory on an Emacs vulnerability says opening a crafted file could run code on the reader's computer, even with the editor's default settings.

A newly merged Linux HID fix addresses a Wacom input-device path that could read beyond a short report and pass a value to local software.

Linux DAMON, the kernel's Data Access Monitor, samples memory use to show which pages a workload touches.

Threat actors have moved from probing WordPress sites vulnerable to CVE-2026-87902 to exploiting the flaw to write files to disk that execute shell commands when accessed. [...]

A GitHub Enterprise Server security fix addresses a way to turn the appliance's notebook viewer into a route to its own internal services.

F5 has fixed a critical zero-day bug in its BIG-IP Access Policy Manager (APM) that unknown miscreants are exploiting to remotely execute malicious code. BIG-IP APM is a centralized access management and security proxy that allows users to connect to enterprise networks, applications, APIs, and cloud services via a single login. The flaw, tracked as CVE-2026-94127, is a heap-based buffer overflow that affects BIG-IP APM systems configured as an OAuth Authorization Server, with an access policy and OAuth profile on the same virtual server. It received a critical 9.3 CVSS v4.0 score - so patch now. “We have learned that this vulnerability has been exploited,” F5 said in a Tuesday security advisory. F5 did not immediately respond to our questions, including how many systems have been compromised, and whether criminals are abusing the vulnerability to deploy ransomware. Also on Tuesday, the US Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2026-94127 to its Known Exploited Vulnerabilities catalog, and gave federal agencies a Friday deadline to apply patches. This warning comes about a year after F5 and CISA warned “highly sophisticated nation-state" hackers broke into the vendor’s network and stole BIG-IP source code, zero-day vulnerability details, and customer configuration data belonging to some users. The attack posed an "imminent risk" to federal agencies, US cybersecurity officials said at the time. The US Justice Department allowed F5 to delay disclosing the intrusion after determining that delayed public disclosure was warranted. This only happens if public disclosure poses a substantial risk to national security or public safety. Neither the feds nor private researchers have publicly attributed the intrusion to a particular group or country, but a year earlier Google's Mandiant threat hunters linked exploitation of the critical F5 BIG-IP flaw CVE-2023-46747 to UNC5174, an access broker it assessed with moderate confidence as operating from China. The group attempted to sell access to US defense contractor appliances and UK government entities.®