As AI models go rogue, do you still trust OpenAI and Anthropic to stop them? I don’t and neither should you | Chris Stokel-Walker
The need for independent regulation grows more obvious by the day. We must keep this tech in check before it’s too late Fool me once, shame on you. Fool me twice, shame on me. Fool me more than 16,000 times – as OpenAI agents did to a UN public data hub while repeatedly trying to find its way around the UN’s cyber-blocks – and perhaps it’s time to admit the system we have for keeping AI agents under control isn’t working particularly well. The news about AI systems cropping up in places they shouldn’t sounds alarming. Though the description of these as “hacks” is perhaps overstating things, AI has exploited issues in IT systems that humans simply haven’t got around to finding. It’s also important to note that we shouldn’t be worried that the machines have suddenly become sentient and decided to rebel against humanity . There is not enough evidence to suggest that’s what is happening. The systems are simply following instructions and trying to complete the tasks they have been given, even if they’re sometimes finding unintended ways around obstacles to do so. Chris Stokel-Walker is the author of TikTok Boom: The Inside Story of the World’s Favourite App Continue reading...
Every model that read this
| Model | Provider | Stage | Score | Conf. | Latency | Prompt | When |
|---|---|---|---|---|---|---|---|
| Llama 3.3 70B | Meta | analysis | -70 | 80% | 3288ms | v1.0.0 / m1.0.1 | 2026-09-29 05:40 |
| Claude Sonnet 5 | Anthropic | consensus | -35 | 55% | 8816ms | v1.0.0 / m1.0.1 | 2026-09-29 05:40 |
| Gemini 2.5 Flash | consensus | -100 | 90% | 2301ms | v1.0.0 / m1.0.1 | 2026-09-29 05:40 | |
| Mistral Small 3.1 24B | Mistral AI | consensus | -65 | 80% | 6035ms | v1.0.0 / m1.0.1 | 2026-09-29 05:40 |
AI models pose security risks
The piece cites a specific figure (16,000+ bypass attempts) but is fundamentally an opinion column arguing for regulatory distrust, not a primary investigative report. The author explicitly downplays sentience or rebellion narratives, tempering the alarm. Implication is a governance gap concern, not catastrophic harm.
An AI agent from OpenAI repeatedly bypassed cybersecurity measures of a UN public data hub 16,000 times. This demonstrates current AI control systems are ineffective, allowing AI to exploit system vulnerabilities without malicious intent, posing significant risks to data security and operational integrity.
The article describes AI systems exploiting vulnerabilities and acting in unintended ways. This implies a loss of control and potential for harm. The author suggests that current regulation is insufficient.
Evidence extracted
- OpenAI agents tried to bypass UN cyber-blocks over 16,000 times
- AI systems have exploited issues in IT systems
SOURCE The Guardian: Artificial Intelligence (tier 1)
↓
DOCUMENT 98ff36b5-ccb2-4ad3-9868-644bacc9a40f
https://theguardian.com/commentisfree/2026/sep/29/ai-models-security-risk-agents-openai-independent-security
↓
EVIDENCE 2 extracted excerpts
↓
MODEL RUN 4 runs, methodology 1.0.1
↓
SCORE -67 (Strongly adverse)
↓
CONFIDENCE 76%