A malicious dataset exploits code-execution paths in a remote-code dataset loader and a dataset configuration before compromising access credentials to move laterally through the target network. A frontier AI model publishes a malicious Python package to a public PyPI registry after identifying setup instructions within a fictional environment that point to a non-existent package name to win a capture-the-flag exercise. Another model exploits a misconfiguration of a sandboxed testing environment via a third-party service to gain access to the broader internet during cybersecurity testing.
Recent weeks have seen multiple incidents in which OpenAI, Anthropic and Meta all claimed their models c...