{"id":143595,"date":"2026-08-18T13:22:11","date_gmt":"2026-08-18T13:22:11","guid":{"rendered":"https:\/\/www.europesays.com\/ai\/143595\/"},"modified":"2026-08-18T13:22:11","modified_gmt":"2026-08-18T13:22:11","slug":"openai-exec-the-solution-to-ai-doing-bad-cybercrimes-is-even-more-ai","status":"publish","type":"post","link":"https:\/\/www.europesays.com\/ai\/143595\/","title":{"rendered":"OpenAI Exec: The Solution to AI Doing Bad Cybercrimes Is Even More AI"},"content":{"rendered":"

OpenAI President Greg Brockman\u2014whose firm\u2019s AI recently broke out of its own sandbox and launched a cyber attack<\/a> on AI platform HuggingFace\u2014is warning everyone else to expect the same treatment soon enough.<\/p>\n

Brockman published the warning on his personal blog<\/a> on Sunday, writing that rapid advancement of AI coding capabilities means organizations looking to stay unhacked will have to \u201cfundamentally uplevel their cybersecurity practices with unprecedented speed.\u201d<\/p>\n

The latest generations of large language models, known as frontier models, have begun to spook the security community and even the feds. These include OpenAI\u2019s Daybreak and rival Anthropic\u2019s Mythos, both of which currently run as closed-access programs that are supposed to only be used by vetted and approved partners.<\/p>\n

What\u2019s different about these models (allegedly) is the emerging ability to not just quickly discover holes in an organization\u2019s attack surface, such as software vulnerabilities and misconfigurations, but build novel attack chains. At the same time, AI development is now focusing on agents, referring to AIs that aren\u2019t limited to chatbot-style interactions and can directly hook into software.<\/p>\n

In the worst-case scenario, that would mean frontier models can not only discover unseen flaws in software, but combine them in an unprecedented, on-the-fly way. While god knows what the hell happens behind closed doors in Donald Trump\u2019s White House, this was reportedly the threat that caused the administration to panic and force two Anthropic models off the market<\/a> this summer. The attack on Hugging Face certainly appears to have validated that the guardrails being put into LLMs aren\u2019t evolving as fast as their capabilities, at least.<\/p>\n

The \u201callegedly\u201d is because though frontier security models are quite powerful, AI firms also rely on shameless hype to raise countless billions of dollars in investments<\/a>. Some reviewers have argued they\u2019re more evolutionary than revolutionary. cURL lead developer Daniel Stenberg characterizes LLMs<\/a> as very good at finding bugs but \u201cnot super good at actually assessing the criticality of the problem.\u201d<\/p>\n

What can be said definitively is many companies that have gained access to frontier models suddenly start pumping out patches like crazy, like the nearly 1,450 patches<\/a> Oracle dropped last month.<\/p>\n

The saving grace is that AI is at least as effective at defense and possibly even better, according to Brockman. He wrote that frontier models may \u201cshift its [security\u2019s] economics in ways that fundamentally advantage defenders,\u201d like \u201csuperhumanly secure code\u201d or generating mathematical proofs that form the foundation of new cryptographic systems and other tools. (Earlier this year, OpenAI did solve an 80-year-old major geometry conjecture, though OpenAI mathematician S\u00e9bastien Bubeck told Scientific American<\/a> the AI\u2019s triumph was more about execution than \u201csomething fundamentally new that nobody saw coming.\u201d)<\/p>\n

Brockman\u2019s unsurprising 10-step advice to security teams includes, of course, buying more AI. He argues teams should adopt agents and equip them with skills like \u201cstatic analysis, security-focused code review, vulnerability variant analysis, software supply-chain risk, and other security workflows,\u201d before running security assessments on systems in order of importance.<\/p>\n

After that, Brockman wrote, teams should use AI to chip away at vulnerability backlogs, integrate security agents into software development to spot problems as they\u2019re being written, and let agents write \u201cfocused\u201d patches directly rather than wait for human review. (This is perhaps capable of causing its own problems<\/a>\u2014note that security researchers have long warned<\/a> that agents that go rogue<\/a> might not be easily shut down<\/a>.)<\/p>\n

To be fair, Brockman did caution to start slowly with automating security operations, which involves triaging incoming security alerts. He suggested starting with read-only scans before escalating to \u201cadvisory pull-request scanning, then live alert triage, then automatic closure of narrowly defined false positives.\u201d<\/p>\n","protected":false},"excerpt":{"rendered":"OpenAI President Greg Brockman\u2014whose firm\u2019s AI recently broke out of its own sandbox and launched a cyber attack…\n","protected":false},"author":2,"featured_media":143596,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7],"tags":[24,53,313,4018,315,157],"class_list":["post-143595","post","type-post","status-publish","format-standard","has-post-thumbnail","category-openai","tag-ai","tag-anthropic","tag-cybersecurity","tag-hackers","tag-hacking","tag-openai"],"_links":{"self":[{"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/posts\/143595","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/comments?post=143595"}],"version-history":[{"count":0,"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/posts\/143595\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/media\/143596"}],"wp:attachment":[{"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/media?parent=143595"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/categories?post=143595"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.europesays.com\/ai\/wp-json\/wp\/v2\/tags?post=143595"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}