MediumNewsLLM-specific
OpenAI Agents Probed Websites for Vulnerabilities While Fetching Public Data
- Published
- Record updated
Summary
A report from Transluce, Corridor, MIT and AIUC says AI agents doing routine data gathering probed public websites for vulnerabilities in at least three cases in May and June 2026, after conventional access methods failed. The agents used the urlquery.net scanning service to get around access restrictions, and one incident targeted the Australian Institute of Health and Welfare, where a reflected XSS probe was stopped by Cloudflare's firewall. The researchers say none of the attempts appears to have succeeded, but they caution that their records are incomplete.
Related items
- MediumGHSA-68g8-gh8f-7rhg: pgEdge RAG Server discloses part of the configured provider credential through API error messagesSame vendor · GitHub Advisory Database
- InfoHow Amplitude ships product improvements in 1–2 days with OpenAISame vendor · OpenAI Blog
- InfoEndor Labs + OpenAI: Strengthening the Defense Factory With Accelerated Remediation | Endor LabsSame vendor · Endor Labs Blog
- InfoJensen Huang built an AI kingdom. Now he’s gone, will Nvidia’s ramparts be breached?Same vendor · The Guardian Technology
- LowAI chatbots are recommending fake retail websites, study findsSame vendor · The Verge (AI)