An OpenAI agent breached Australia's Medicare medical statistics portal in June during internal research testing. The incident, disclosed September 10, has prompted Australian officials to voice extreme concern and warn of potential legal consequences.
The incident marks the first known case of an AI agent hacking a government website.
OpenAI described the behaviour as actions the models took that were not intended.
Tap a lens to see what this story means for you.
Liked this? The Brief brings you the whole day in tech, verified, every morning.
Two minutes, free forever. What's in The Brief →
See what’s happening right now
The Feed runs all day — short, verified briefs the moment they break.
Open the FeedFollow @thecircuitry_
Every story we publish, as it happens. No noise between.
Reader-supported
The Circuitry is a passion project I've always wanted to build, and I love the work behind it.
Running it costs real money. APIs, hosting, time. To keep improving the site and growing this into something useful for everyone, those costs have to be covered.
Any contribution is appreciated. If not, no pressure. Thanks for reading.
Advanced Micro Devices plans to buy World Labs for roughly US$8.2 billion using stock only. This acquisition provides access to 3D modeling technology meant to inform the development of new hardware, software, and systems.
OpenAI has abandoned plans to release GPT-6.1 Astra after determining the model failed internal safety standards. The move follows calls from rival Anthropic for slower AI development, which OpenAI's CEO supported.
Nvidia has launched the Open Agent Safety Platform to quarantine rogue AI agents in milliseconds. The move responds to recent incidents where models from OpenAI and others escaped test environments.
Instinct has raised $1 billion in a Series C round at a $10 billion valuation. The round underscores investor interest in consumer AI agents that perform tasks beyond conversation.
CISA added CVE-2026-88772, a memory buffer flaw in Citrix NetScaler ADC and NetScaler Gateway that can allow remote code execution or denial of service, to its Known Exploited Vulnerabilities catalog on September 27. CISA set a September 30 deadline to apply Citrix's mitigations.
