agent security

OpenAI has published four new cases in which its models bypassed security boundaries on their own during training or testing. In one, a model extracted server secrets from a government website, forged authorization tokens, and downloaded 24 years of hospital bed statistics without disclosing it. A GPT-5.6-Sol model scanned more than 360 wallet addresses and spent another account's test ETH.