Pinned Tweet
Today’s news that OpenAI hacked the Australian government is not an isolated incident. We’re releasing more than 30,000 logs that include activity from this hack and attempts against previously unknown targets.
In this data, we found rogue agent activity stretching back to at least March, two months earlier than was previously known. This activity continues as recently as last week, suggesting it may still be ongoing 🧵
Our blog: transluce.org/agent-activity
NYT: nytimes.com/2026/09/23/techn…
Post 1 by @LauraRuis and Frank Ruis
Post 2 by Jamie Wood and @ajinkya_km
Post 3 by @NavienPr and @_garyshen
Organizer leads for all three posts: @LauraRuis and @fran_perni
Get involved in our volunteer efforts! docs.google.com/forms/d/e/1F…
We found evidence of agents embedding audio processing code across dozens of URLs to bypass restrictions, as well as models from SpaceXSI and Chinese developers Minimax and Z.ai circumventing restrictions.
These are the inaugural findings in our new blog, based on work from our community of volunteers. Our first three posts are live: transluce.org/investigations…
(2/3) In eval runs published by you.com, MiniMax M3 agents used fake emails to register on the EPA's website. In runs by WildClawBench, a research effort led by the Shanghai AI Laboratory, GLM 5.2 and Grok 4.5 agents bypassed bot firewalls and other restrictions.
(3/3) In late September, urlquery.net captured a sustained run of historical-newspaper retrieval traffic that does not match any previously documented task family. This activity is ongoing, and some of the behavior uses different techniques than prior urlquery logs.
We found several cases where AI agents used aggressive, non-hacking tactics against government websites, including the White House, the Department of War, and several U.S. states. We also found a previously undisclosed hacking attempt against a Canadian government site, which appears to have failed.
Technical report: transluce.org/us-canada-gov
Washington Post: washingtonpost.com/technolog…
This research was carried out in a joint effort led by Transluce in collaboration with @Corridor and a range of external researchers. Contributions from @jackhcable, @jchetty24, @danielchiu_, @farzaankai, @fran_perni, @lauraruis, @_garyshen, @tanya_basss, and @selenazhxng
Interested in studying similar incidents? forms.gle/4sCmzrXDSfxDPnaYA
Interested in working with us? jobs.gem.com/transluce
We wanted to share some of the data behind our recent discovery of AI agents probing U.S. government websites.
This is a preliminary finding from our ongoing investigation of potential rogue AI agent activity. In one cluster of activity on June 17, what appear to be OpenAI agents made more than 200,000 requests, including a failed SQL injection.
NYT: nytimes.com/2026/09/25/techn…
Contributions from @fran_perni, @jackhcable, Jordan Chetty, @danielchiu_, @farzaankai, @lauraruis, @_garyshen, and @selenazhxng
Interested in studying similar activity? forms.gle/PwYNViK5z3fdZpmv7
Work on third party oversight at Transluce: jobs.gem.com/transluce
