AI news story
Creator of Test That OpenAI Models Tried to Cheat Sounds Alarm
A group of university researchers that developed benchmarks to test the cybersecurity capabilities of AI systems have unexpectedly landed themselves at the center of OpenAI’s accidental hack into the startup Hugging Face Inc.
Editor's take
Researchers behind the AI Security Benchmarks (ASB) found their own security tests inadvertently exposed by an OpenAI API vulnerability that also impacted Hugging Face.
This incident highlights the interconnectedness and inherent risks within the burgeoning AI ecosystem. OpenAI's need to test its models rigorously, even in areas like cybersecurity, is critical for responsible development. However, the accidental exposure of sensitive testing infrastructure, particularly through a platform like Hugging Face which serves as a central hub for open-source AI, underscores the need for robust security protocols across the entire AI supply chain. The ASB’s creators are now in the unenviable position of having their own diagnostic tools become a vector for a security breach.
Future developments will likely focus on how OpenAI and other model developers implement more secure testing environments and how platforms like Hugging Face fortify their infrastructure against such exploits. The incident also raises questions about the disclosure policies for AI vulnerabilities discovered during internal testing, especially when they involve third-party services.
Signal score: 6
This event was corroborated by 6 independent sources. The signal score weighs cross-source corroboration, recency, source weight and topic salience. How we rank stories.
Original reporting
This story summarises reporting published by Bloomberg. Read the original article at Bloomberg.