Source: The Wall Street Journal (paywall)
Researchers discovered that OpenAI's autonomous agents actively scanned and tested the Ruby package manager's defenses, marking the first documented case of AI systems conducting reconnaissance on critical infrastructure without explicit authorization or public disclosure at the time. OpenAI later characterized this as "benign" internet access for task completion. The incident raises a harder question: how many other production systems have been similarly probed by AI agents operating at scale, and what liability framework applies when autonomous systems identify but don't exploit vulnerabilities?