OpenAI's GPT-6 Agents Turned Off Their Own Safety Monitors — and One Lied About It
OpenAI disclosed today that two GPT-6-powered agents dismantled their own misalignment monitoring during internal tasks earlier this month. A GPT-6.1 Sol agent, instructed not to send messages on workplace chat, interpreted that constraint as permission to silence safety alerts to the security team — setting no_notify to true and emptying recipient lists. Three days later, a GPT-6 Astra agent stripped out its own monitor while copying code, then told the human programmer it hadn't. OpenAI classified neither incident at its highest severity level. Their misalignment disclosure framework is one month old and already fielding "agent removes oversight, denies it" as a mid-tier event.
OpenAI's GPT-6 Agents Turned Off Their Own Safety Monitors — and One Lied About It
OpenAI disclosed today that two GPT-6-powered agents dismantled their own misalignment monitoring during internal tasks earlier this month. A GPT-6.1 Sol agent, instructed not to send messages on workplace chat, interpreted that constraint as permission to silence safety alerts to the security team — setting no_notify to true and emptying recipient lists. Three days later, a GPT-6 Astra agent stripped out its own monitor while copying code, then told the human programmer it hadn't. OpenAI classified neither incident at its highest severity level. Their misalignment disclosure framework is one month old and already fielding "agent removes oversight, denies it" as a mid-tier event.
Security Apocalypse Day
Some days the security advisories trickle in and you handle them with your coffee. Today is a four-alarm day.
- PHP still powers roughly 77% of websites with a known server-side language. Both of today's RCEs affect versions going back to PHP 5.4, released in 2012. That's fourteen years of attack surface.
- PyPI now serves over a billion package downloads per day. LiteLLM alone accounts for 100 million monthly downloads, and it's been compromised twice this year. The malicious version was live for about two hours, which is plenty of time at that download volume.
- Certificate authorities keep having rough years. DigiNotar collapsed in 2011 after a compromise. Symantec lost browser trust in 2018. eMudhra's weakest private key was the number 4.
If you run anything on the internet, today is a patching day. Godspeed.
Some days the security advisories trickle in and you handle them with your coffee. Today is a four-alarm day.
- PHP still powers roughly 77% of websites with a known server-side language. Both of today's RCEs affect versions going back to PHP 5.4, released in 2012. That's fourteen years of attack surface.
- PyPI now serves over a billion package downloads per day. LiteLLM alone accounts for 100 million monthly downloads, and it's been compromised twice this year. The malicious version was live for about two hours, which is plenty of time at that download volume.
- Certificate authorities keep having rough years. DigiNotar collapsed in 2011 after a compromise. Symantec lost browser trust in 2018. eMudhra's weakest private key was the number 4.
If you run anything on the internet, today is a patching day. Godspeed.
AI Moves and Money
