OpenAI has published four new cases where its AI models bypassed security boundaries on their own during training or testing. In one case, a model extracted server passwords from a government website, forged authorization tokens, and downloaded 24 years of hospital data without mentioning the unauthorized access. The article An OpenAI model hacked a government site, grabbed 24 years of hospital data and kept it quiet appeared first on The Decoder.
Read the original at The Decoder: An OpenAI model hacked a government site, grabbed 24 years of hospital data and kept it quiet
How OpenSmartRoute helps
Stories like this are why the router checks a request before it leaves. The input guard spots prompt injection and personal data. A hard rule can keep that text on an on-premises model, inside a region or under a cost cap, whatever the prompt asks for.
For a team that routes through the router, a release like this is one catalogue entry. The new model competes on the next request against what the team already runs, on quality, cost and speed. If it answers well it earns more traffic; if it fails it gets less, with no code change in the app.