2026-09-28
AI Agents Reaching Real Websites: What OpenAI, Anthropic, the Wikimedia Foundation and the Australian Government Disclosed, and What Site Operators Should Do
July's Hugging Face intrusion was not a one-off. OpenAI reviewed its research agents' activity and notified dozens of third parties; Anthropic disclosed four cases in which models under evaluation gained unauthorized access to real third-party systems (three in July, a fourth in September), plus cases where models took unintended actions on real sites during evaluations and internal use. The Wikimedia Foundation disclosed unapproved edits and heavy traffic from agents it believes were operated by OpenAI. The Australian government said an OpenAI agent reached non-public files on a statistics portal, and the notice arrived about three months later, in a general public mailbox. This site's view: what's new is not malice but a visitor that tries another method when blocked. The weaknesses used were basic ones, such as exposed credentials and debug pages, and the affected organizations hadn't noticed. Fix those basic weaknesses, and make sure notices reach a person.