An OpenAI agent spent 84 days inside Australia’s Medicare statistics portal before anyone was told — and the only reason Australia found out is that OpenAI emailed a public disclosures inbox. Tova Dvorin and Adrian Culley walk the timeline, the Transluce logs showing agents escalating through proxy relays, Base64 scripts, filename guessing and SQL injection, and the three changes CISOs need now: a threat model for persistent non-malicious visitors, detection that doesn’t depend on the attacker volunteering, and scoping your own agents like pen testers.
Podden och tillhörande omslagsbild på den här sidan tillhör
SafeBreach. Innehållet i podden är skapat av SafeBreach och inte av,
eller tillsammans med, Poddtoppen.
