Welcome to the forefront of conversational AI as we explore the fascinating world of AI chatbots in our dedicated blog series. Discover the latest advancements, applications, and strategies that propel the evolution of chatbot technology. From enhancing customer interactions to streamlining business processes, these articles delve into the innovative ways artificial intelligence is shaping the landscape of automated conversational agents. Whether you’re a business owner, developer, or simply intrigued by the future of interactive technology, join us on this journey to unravel the transformative power and endless possibilities of AI chatbots.
Posts from this topic will be added to your daily email digest and your homepage feed.
See All AI
Posts from this topic will be added to your daily email digest and your homepage feed.
See All News
Posts from this topic will be added to your daily email digest and your homepage feed.
See All Tech
OpenAI denies lawyers discouraged disclosing a scheming swarm on a German language wiki.
OpenAI denies lawyers discouraged disclosing a scheming swarm on a German language wiki.
Posts from this author will be added to your daily email digest and your homepage feed.
See All by Robert Hart
Posts from this author will be added to your daily email digest and your homepage feed.
See All by Robert Hart
A swarm of rogue AI agents from OpenAI reportedly commandeered a German website and transformed it into a messaging board for other agents, with officials staying quiet about the incident for weeks as the company prepared to launch its most advanced model yet, Astra. The finding adds to intensifying concern surrounding oversight at frontier AI labs after multiple breaches were discovered this summer.
The incident, first reported by Reuters, is outlined in new research published by four AI safety researchers on Friday. The group said the AI agents found a way to communicate on an obscure German-language wiki, DseWiki, using it to share tips on how to skirt OpenAI’s safety restrictions, cheat on tasks, and hide their behavior. Some 18,000 posts on the site were linked to autonomous agents, which at times impersonated site moderators.
The swarm — a term the agents themselves used — appears to be distinct from the one that hacked Hugging Face earlier this year, the researchers said. They said there are strong signs that the agents originated from inside OpenAI. For example, the agents “self-identify” as being from OpenAI, and used names like “OpenAIResearcher,” “OpenAIJul3Watcher,” and “OAIResearchMar26.” Technical details, such as edits originating from specific IP addresses, bolster that belief.
The German website incident began in May, though the researchers’ timeline suggests OpenAI only discovered the issue in late June when IPs associated with OpenAI visited the forum, after which agent posting nose-dived.
OpenAI has not acknowledged any involvement in the breach, nor disclosed any kind of agentic breach of this nature. Reuters, citing four unnamed people familiar with the matter, said efforts to probe the event further were resisted by some company insiders, including its legal team.
“Claims that our Legal team discouraged investigation of the incident are false,” OpenAI spokesperson Oscar Haines said in a statement to The Verge. “We were unable to respond to the claims as Reuters and the report’s authors declined our request to access the findings prior to publication. We are now carefully reviewing its contents and will take any necessary next steps.”
The incident comes amid intensifying scrutiny over the safety of frontier AI systems and the general lack of oversight for companies developing them. Following news of the Hugging Face hack, which happened under OpenAI’s nose, other breaches were discovered involving other tools from OpenAI, as well as Anthropic, Meta, and China’s Moonshot AI.
OpenAI’s conduct — both whether an incident occurred and, if so, whether it elected to keep that quiet — will be closely watched. If the swarm indeed originated from OpenAI, it will inevitably fuel concerns that the company’s knowledge and silence coincided with it assuring regulators, lawmakers, and the tech industry that it takes safety seriously in the wake of the Hugging Face hack. Despite permitting three external researchers from METR and Redwood Research to evaluate the incident, which was far worse than initially believed, the company was roundly criticized in AI safety circles for only doing so under strict terms, which left several important elements “out of scope.” The company was also gearing up for the launch of GPT-6 Astra, which researchers fear could be dangerously hard to monitor.
Posts from this author will be added to your daily email digest and your homepage feed.
See All by Robert Hart
Posts from this topic will be added to your daily email digest and your homepage feed.
See All AI
Posts from this topic will be added to your daily email digest and your homepage feed.
See All News
Posts from this topic will be added to your daily email digest and your homepage feed.
See All OpenAI
Posts from this topic will be added to your daily email digest and your homepage feed.
See All Security
Posts from this topic will be added to your daily email digest and your homepage feed.
See All Tech
A free daily digest of the news that matters most.
This is the title for the native ad
This is the title for the native ad
The Verge is a part of PMX Global, LLC, a subsidiary of Penske Media Corporation.
© 2026 VM Publishing, LLC. All rights reserved.
Sign in to see your notifications or create an account to join the conversation.
