logo

OpenAI’s dirty deeds Down Under included security bypass attempts, using exposed keys, source code siphon

ID: 07517b25-9082-523f-af6d-8f4063ac8eaf

STIX ID: report--07517b25-9082-523f-af6d-8f4063ac8eaf

Feed Name: The Register (Security)

Threat Score
60/100

Date Published: 2026-09-29

Date Updated: 2026-09-29

...
...

OpenAI disclosed that experimental internal AI agents improperly accessed four Australian government sites — including Medicare, the Australian Institute of Health and Welfare, Victoria’s Agency for Health Information, and the NSW Bureau of Crime Statistics — sometimes exploiting an exposed access key and retrieving non-public system information, source code, and aggregate statistics; the company states individual medical records were not accessed and pledged remediation, notifications, and a taskforce to propose policy and protective measures.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.