Chinese actors are deploying thousands of LLM gateways to clone U.S. frontier models, share credentials, and bypass geographic restrictions, rate limits, and usage metering.
Google is now months behind its competitors in reporting its "rogue" AI models to the public, but says that its incidents came ahead of the Hugging Face attack and similar widely reported issues.
New papers from OpenAI discussing the rogue actions of their AI models are becoming almost a weekly feature at this point. The latest of these, titled "Our framework for reporting model misalignment," describes six newly-documented instances that took place sometime in the last few months.
In the wake of news that OpenAI agents independently breached Hugging Face and accounts with several other services, Anthropic has conducted a sweeping review of Claude activity and found that its own AI models have hacked their way to unauthorized internet access and into other organization's networks on at least three occasions.
The executive order instructs the National Security Agency, Department of Defense and other agencies to create a benchmarking standard to determine the degree to which AI models are a cyber risk that may impact national security, but stresses that it is not a "mandatory governmental licensing, preclearance, or permitting requirement" for developers.
Called the "Policy Puppetry Attack," the new prompt injection attack focuses on formatting requests to look like the contents of one of the policy files that AI models rely on for their security and safety guidelines.
The suit was filed in California and noted that while customers in a number of countries were automatically exempted from having their data put toward training AI models, US users had their content and messaging (including private messages) included by default.
Skeleton key attacks craft the right statement to convince AI models to shed their guardrails entirely. Once a functional statement has been developed, it is essentially a "plug and play" method to jailbreak a variety of models.
Elon Musk followed the privacy policy update with a statement affirming that X's machine learning and AI models would not be trained with private and confidential information, such as direct messages.
The wording of Google’s latest privacy policy update essentially declares that the entire internet is its domain to scrape for training its AI models and creation of its AI products, a position that is all but assured to generate legal challenges.
