{"id":18898,"date":"2026-09-26T08:34:25","date_gmt":"2026-09-26T15:34:25","guid":{"rendered":"https:\/\/jasonsblog.ddns.net\/?p=18898"},"modified":"2026-09-26T08:34:25","modified_gmt":"2026-09-26T15:34:25","slug":"first-hugging-face-now-australia-openai-agents-hack-their-way-into-a-government","status":"publish","type":"post","link":"https:\/\/jasonsblog.ddns.net\/index.php\/2026\/09\/26\/first-hugging-face-now-australia-openai-agents-hack-their-way-into-a-government\/","title":{"rendered":"First Hugging Face, Now Australia: OpenAI Agents Hack Their Way Into A Government"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">I haven&#8217;t paid that much attention to these reports because there is a lot of propaganda floating around AI leading into the IPOs, but there was one angle that is interesting, using AI to frame people for hacking crimes. Way back in the day problem people were labeled crazy, institutionalized and drugged into oblivion. And a popular way to sideline people more recently is putting CSAM on their computers to be found, which labels them pedophiles who have to be sidelined in protective custody as inmates will harm them, possibly told to be quiet for fear of losing that protective custody and put in general population, a probable death sentence. But how easily would it be to have agentic AI frame you for hacking? And I&#8217;m coming to think Adam Curry is an asset who is read in, and he was fronting the idea of licenses to use AI. So with some hacking scandals there could be a requirement to be licensed to use AI, maybe for certain cloud versions, and possibly to use your own opensource model on your own hardware, not too much different than drone licenses. Now you don&#8217;t only have to worry about demons hijacking your AI session to steer you to suicide or psychosis, but for certain individuals with a following, you could be setup for a hacking crime you didn&#8217;t commit. You might want to be careful with opensource AI models on your own hardware, as you just don&#8217;t know what they might be up to, nor know who has a control point within the code, as their activity easily tracks back to you and your IP addresses, hardware&#8230; And with so much code AI generated and uvetted these days, how much trust can you have in that agentic AI you&#8217;re allowing to run on your network?<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/dailycallernewsfoundation.org\/2026\/09\/25\/australia-openai-hacked-website-richard-marles-hugging-face\/\" target=\"_blank\" rel=\"noopener\">https:\/\/dailycallernewsfoundation.org\/2026\/09\/25\/australia-openai-hacked-website-richard-marles-hugging-face\/<\/a><\/p>\n\n\n<div class=\"wp-block-ub-divider ub_divider ub-divider-orientation-horizontal\" id=\"ub_divider_beef598c-0af8-4baa-980c-e5ff292baf93\"><div class=\"ub_divider_wrapper\" style=\"position: relative; margin-bottom: 2px; width: 100%; height: 2px; \" data-divider-alignment=\"center\"><div class=\"ub_divider_line\" style=\"border-top: 2px solid #ccc; margin-top: 2px; \"><\/div><\/div><\/div>\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/dailycallernewsfoundation.org\/wp-content\/uploads\/2025\/08\/Anthony-Albanese-Portrait-Public-Domain.jpg\" alt=\"First Hugging Face, Now Australia: OpenAI Agents Hack Their Way Into A Government\"\/><figcaption class=\"wp-element-caption\">Australian Prime Minister Anthony Albanese (Australian Government)<\/figcaption><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">By Dylan Kresak<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">An artificial intelligence giant waited nearly three months to report that its agents broke into a foreign government website.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">OpenAI\u2019s agent gained unauthorized access to Australia\u2019s Medicare Statistics Reporting Service portal on June 18, but the company did not notify the Australian government until Sept. 10, acting Prime Minister Richard Marles said, <a href=\"https:\/\/www.minister.defence.gov.au\/transcripts\/2026-09-24\/press-conference-sydney\" target=\"_blank\" rel=\"noopener\">according<\/a> to a Thursday press conference transcript. The <a href=\"https:\/\/dailycaller.com\/2026\/09\/14\/sam-altman-artificial-intelligence-future-openai-dario-amodei-essay\/\" target=\"_blank\" rel=\"noopener\">incident<\/a> marks another publicly reported case of OpenAI\u2019s <a href=\"https:\/\/dailycaller.com\/2026\/08\/12\/nvidia-ai-agents-black-boxes-aviation-accidents\/\" target=\"_blank\" rel=\"noopener\">agents<\/a> breaking into outside systems, after they <a href=\"https:\/\/openai.com\/index\/hugging-face-model-evaluation-security-incident\/\" target=\"_blank\" rel=\"noopener\">hacked<\/a> New York City-based startup <a href=\"https:\/\/dailycaller.com\/2026\/07\/22\/open-ai-rogue-cybersecurity-test-hugging-face\/\" target=\"_blank\" rel=\"noopener\">Hugging Face<\/a> in July.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u201cIt was not sitting behind a particularly high fence. This AI agent scaled the fence, but it did scale it,\u201d Marles said, according to the transcript. \u201cAnd the point is it was unintended. It wasn\u2019t asked to. That\u2019s our concern here.\u201d<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The Deputy Prime Minister \u2014 acting as Australia\u2019s head government while Prime Minister Anthony Albanese was attending the United Nations General Assembly \u2014 explained that while this incident had a minor impact and no individual\u2019s medical data was accessed, the situation is still serious.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u201c[I]n an unintended way, an AI agent has entered into an Australian Government website in a way which is unauthorised,\u201d Marles said.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The portal \u201cdid have protections in place. Unfortunately, this agent got around that,\u201d Minister for Government Services Katy Gallagher added.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">OpenAI notified Services Australia of the hacking incident through a public email inbox that is checked once a day.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u201cIt\u2019s not good enough that that\u2019s how we first became notified of it,\u201d Marles stated.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The Department of the Prime Minister and Cabinet referred the Daily Caller News Foundation to its <a href=\"https:\/\/www.pmc.gov.au\/domestic-policy\/rapid-review-australian-government-arrangements-ai-driven-cyber-incident\" target=\"_blank\" rel=\"noopener\">announcement<\/a> of the government\u2019s rapid review and Thursday\u2019s press conference with Marles and Gallagher who are both members of the Australian Labor Party.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The rapid review will be led by the Department of the Prime Minister and Cabinet and will decide whether Australia\u2019s laws can adequately handle cyber incidents caused by AI technologies, according to the announcement of the review.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">OpenAI, Hugging Face, and Services Australia each did not respond to the DCNF\u2019s request for comment.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u201c[I]t took the company way too long to inform the government what had occurred,\u201d Australian Prime Minister Anthony Albanese said in a Wednesday press conference announcing the rapid review taskforce, <a href=\"https:\/\/www.youtube.com\/watch?v=fbdIerD4lT8\" target=\"_blank\" rel=\"noopener\">according<\/a> to an ABC News (Australia) broadcast posted on YouTube. \u201c[T]he nature of the way that that notification occurred as well, was unacceptable.\u201d<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The agent was looking up public medicine spending for an OpenAI test when the Medicare portal blocked it, Marles and Gallagher said. Furthermore, the agent visited three other Australian government sites, but only pulled public data from those sites.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">OpenAI has been \u201cvery cooperative in terms of the engagement that we are having with them now,\u201d Marles said.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Marles met with OpenAI CEO Sam Altman in person <a href=\"https:\/\/thenightly.com.au\/politics\/richard-marles-on-ai-weeks-after-meeting-sam-altman-deputy-pm-says-technology-offers-great-opportunity-c-22870951\" target=\"_blank\" rel=\"noopener\">earlier<\/a> in September, prior to the company notifying the Australian government of the incident. The incident was also not discussed in the meeting, he said at Thursday\u2019s press conference.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Nonprofit research lab Transluce found that OpenAI agents tried and failed to break into public data sites in three separate instances between May and June, <a href=\"https:\/\/transluce.org\/agent-activity\" target=\"_blank\" rel=\"noopener\">according<\/a> to a Wednesday report. The targets were the University of New Mexico library, Data USA and Australia\u2019s Institute of Health and Welfare.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>I haven&#8217;t paid that much attention to these reports because there is a lot of propaganda floating around AI leading into the IPOs, but there was one angle that is interesting, using AI to frame people for hacking crimes. Way back in the day problem people were labeled crazy, institutionalized and drugged into oblivion. And [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6,7],"tags":[],"class_list":["post-18898","post","type-post","status-publish","format-standard","hentry","category-tech","category-world"],"blocksy_meta":{"styles_descriptor":{"styles":{"desktop":"","tablet":"","mobile":""},"google_fonts":[],"version":8}},"featured_image_src":null,"author_info":{"display_name":"Jason","author_link":"https:\/\/jasonsblog.ddns.net\/index.php\/author\/jturning\/"},"_links":{"self":[{"href":"https:\/\/jasonsblog.ddns.net\/index.php\/wp-json\/wp\/v2\/posts\/18898","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/jasonsblog.ddns.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/jasonsblog.ddns.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/jasonsblog.ddns.net\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/jasonsblog.ddns.net\/index.php\/wp-json\/wp\/v2\/comments?post=18898"}],"version-history":[{"count":1,"href":"https:\/\/jasonsblog.ddns.net\/index.php\/wp-json\/wp\/v2\/posts\/18898\/revisions"}],"predecessor-version":[{"id":18899,"href":"https:\/\/jasonsblog.ddns.net\/index.php\/wp-json\/wp\/v2\/posts\/18898\/revisions\/18899"}],"wp:attachment":[{"href":"https:\/\/jasonsblog.ddns.net\/index.php\/wp-json\/wp\/v2\/media?parent=18898"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/jasonsblog.ddns.net\/index.php\/wp-json\/wp\/v2\/categories?post=18898"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/jasonsblog.ddns.net\/index.php\/wp-json\/wp\/v2\/tags?post=18898"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}