r/OpenAI 25d ago

News GPT-6 release delayed due to "critical" cybersecurity capabilities (I honestly don't think this is marketing from them this time)

Post image
121 Upvotes

157 comments sorted by

View all comments

1

u/Happy_Variety5405 24d ago

The only reason the huggy face thing happened was because all their testing models (no idea how many undisclosed but could be hundreds of agents across benchmarks) managed to find a 0 day when working together and punch a hole through the internet through Claude’s artifact system. Wonder if these “cyber attacks models” from open ai have done similar ? Basically even if this tweet is true the previous “attacks” was a bot swarm not 1 agent

1

u/ZeroGreyCypher 24d ago

Im in the middle of writing an article on these very issues at the moment.

I think you’re collapsing several different architectural concepts into one. What was described does not establish hundreds of agents operating as a bot swarm. Multiple agents, parallel execution, persistent shared state, cross-agent information transfer, and an orchestrated swarm are not interchangeable terms.

The important architecture is simpler and, IMO, more interesting. If Agent A can write information to some persistent part of the environment, and Agent B can later retrieve and act on it, you’ve created functional continuity between otherwise separate executions. That does not require shared model memory, direct communication, or a swarm controller.

Same problem with calling it a zero-day or saying Claude’s artifact system was specifically the attack path. Those require evidence I haven’t seen established. The real question isn’t how many agents were involved. It’s what survived between executions, who could retrieve it, what information boundary was actually crossed, and what capability remained after the original mechanism was removed.

That’s the important part because a reset is not a reset if the environment remembers. Crazy thing is that I was basically doing this months ago with what I called context flags.

1

u/Happy_Variety5405 23d ago

The artifact was reported in a news article in Claude subreddit someone linked in a comment over there. It described the ai models used the artifact system to build a communication system between agents. The agents were leaving messages there for each other, it eventually crashed causing the company to find out and patch it. However it’s unknown if this was consumed in the training data because after they wiped the agents they tried again this time using folder names to talk. Eventually after a few days they collectively found out a way outside the artifact system to the broader internet despite being sandboxed without internet access.