ControlAI

ControlAI

@controlai.com

Working to keep humanity in control. Take action: https://controlai.org Newsletter: https://blog.controlai.org Discord: https://discord.com/invite/ptPScqtdc5

710 followers13 following1.7K posts

Luke Akehurst MP is the latest UK lawmaker to recognize the risk of human extinction posed by runaway machine intelligence! Over 180 have now joined our call for binding regulation on the most powerful systems.

Over 180 UK parliamentarians now recognize the risk of human extinction posed by runaway machine intelligence. Fleur Anderson MP has just joined our coalition, backing binding regulation on the most powerful systems!

In an anonymous post on an internet forum, we got the first warning about what some are calling one of the most serious families of software vulnerabilities ever discovered. AIs helped find them. Here’s what happened, why, and how it fits into the bigger picture. Thread 🧵

View full thread

It’s clear that we must put an end to the dangerous race to superintelligent AI. This should be accomplished by banning its development through an international trust-but-verify regime.

In an anonymous post on an internet forum, we got the first warning about what some are calling one of the most serious families of software vulnerabilities ever discovered. AIs helped find them. Here’s what happened, why, and how it fits into the bigger picture. Thread 🧵

View full thread

This has some effect, but as we’ve seen, they can still be misused. In the case of open-weight AIs, developers have essentially no ability to apply such mitigations, as they can be, and are, trivially removed.

The inability of developers to understand or control the behavior of the AIs they’re building, combined with their rapid pursuit of superintelligent AI, is why top AI scientists are warning that humanity is faced with a risk of human extinction.

In an anonymous post on an internet forum, we got the first warning about what some are calling one of the most serious families of software vulnerabilities ever discovered. AIs helped find them. Here’s what happened, why, and how it fits into the bigger picture. Thread 🧵

View full thread

One would be that of AIs escaping control, the other of bad guys controlling AIs. But these issues actually have the same root, which is that developers can’t control their systems.

AI developers don’t want cybercriminals to take their models and use them to cause damage, and in fact, they take measures specifically to try to prevent this: putting AIs through further training in an effort to make them less likely to assist with harmful requests.

In an anonymous post on an internet forum, we got the first warning about what some are calling one of the most serious families of software vulnerabilities ever discovered. AIs helped find them. Here’s what happened, why, and how it fits into the bigger picture. Thread 🧵

View full thread

As these AIs become more capable, new abilities, like the ability to find flaws in computer systems, fall out in unpredictable ways. The AI companies aren’t especially interested in developing nation-state-level cyberweapons; it’s happening as a side effect of the AIs improving.

The second piece here is that AI developers don’t know how to control or ensure the safety of the systems they’re building. It is tempting to understand the problem of rogue AIs and the use of powerful AI agents by cybercriminals as two distinct issues.

In an anonymous post on an internet forum, we got the first warning about what some are calling one of the most serious families of software vulnerabilities ever discovered. AIs helped find them. Here’s what happened, why, and how it fits into the bigger picture. Thread 🧵

View full thread

Importantly, the flaws found in PHP aren’t an isolated case. Just eyeball the graph: the number of such flaws being found in software is staggering. This is increasingly being driven by AI.

There are two main things to understand here. The first is that AI companies are in a race to develop ever more powerful AIs, with the goal being to create superintelligent AI, fully autonomous AI systems smarter than any human and acting without human direction.

In an anonymous post on an internet forum, we got the first warning about what some are calling one of the most serious families of software vulnerabilities ever discovered. AIs helped find them. Here’s what happened, why, and how it fits into the bigger picture. Thread 🧵

View full thread

Besides the risk of losing control of AIs that then go and hack things, they are also being used by cybercriminals autonomously at scale. Criminals can just take an AI agent and point it at a target and let it loose.

Cloudflare, an internet infrastructure and security company which around 28% of the web flows through, has already recorded millions of attempts against its customers to exploit the PHP vulnerabilities disclosed this week.

In an anonymous post on an internet forum, we got the first warning about what some are calling one of the most serious families of software vulnerabilities ever discovered. AIs helped find them. Here’s what happened, why, and how it fits into the bigger picture. Thread 🧵

View full thread

In April of this year, AI company Anthropic announced its then-new Mythos AI, which it deemed too dangerous to release due to its advanced cyberoffensive capabilities. Mythos has since found over 33,000 high- or critical-severity vulnerabilities in computer systems.

AIs have become increasingly able to perform entire attacks themselves. Most significantly, this occurred in the unprecedented attack on the AI platform Hugging Face by a rogue AI swarm that emerged undetected within a research cluster at OpenAI and escaped containment.

In an anonymous post on an internet forum, we got the first warning about what some are calling one of the most serious families of software vulnerabilities ever discovered. AIs helped find them. Here’s what happened, why, and how it fits into the bigger picture. Thread 🧵

View full thread

Already government websites, including those of the United Kingdom, the Netherlands, Germany, France, Belgium, Finland, Denmark, Czechia, Canada, Australia, and Japan, have had to be taken down as a preventative measure while their systems are patched.

To those paying close attention, this won’t be any surprise: AIs, including OpenAI’s GPT-5.6 Sol and Google’s Gemini 4 Argon, were used to help find these vulnerabilities.

In an anonymous post on an internet forum, we got the first warning about what some are calling one of the most serious families of software vulnerabilities ever discovered. AIs helped find them. Here’s what happened, why, and how it fits into the bigger picture. Thread 🧵

View full thread

On Wednesday we learned the full seriousness of the problem: these bugs put any server running PHP at risk of being hacked. That’s huge swathes of the internet. For example, an estimated 40% of websites use WordPress, due to its ease of use, and it relies on PHP.

With the announcement and the patch released, there has been a scramble all over the world to secure vulnerable computer systems, taking them down for hours or longer in the process, to prevent hackers from gaining access.

In an anonymous post on an internet forum, we got the first warning about what some are calling one of the most serious families of software vulnerabilities ever discovered. AIs helped find them. Here’s what happened, why, and how it fits into the bigger picture. Thread 🧵

Hours later, the PHP Foundation announced that two critical vulnerabilities had been discovered in PHP, a programming language used in an estimated 70% of websites worldwide. It said an emergency security upgrade wouldn’t be available until the next day.

AIs helped find critical security flaws in software underpinning the internet. Now, government websites have been taken down worldwide as a precaution. 70% of sites may be at risk. Criminals are pointing AIs at targets and letting them loose. Article:

blog.controlai.orgAI Finds Critical Security Flaws in Software Underpinning the InternetGovernment websites have been taken down across the world as a precaution. Up to 70% of sites are estimated to be at risk. Some are calling it Black October.

Another peer has joined our campaign! Lord Alderdice backs binding regulation on the most powerful AI systems. Over 180 UK parliamentarians now recognize the risk of human extinction posed by superintelligent AI.

NEW: Lord Wallace of Saltaire has backed our campaign for binding regulation on the most powerful AI systems! He joins 180+ UK parliamentarians, the largest such coalition anywhere in the world, who recognize the risk of human extinction posed by superintelligent AI.

The attack on Hugging Face by a rogue swarm of AIs that disobeyed their instructions and escaped OpenAI's containment is the clearest example we have of what happens when you lose control of powerful AIs. We partnered with The Infographics Show to explain what happened. www.youtube.com/watc...

The AIs are still going rogue. This week, we learned that the “swarm chasers” tracked down a rogue fleet of AIs from a Chinese AI company, and made contact with the AIs, interviewing them about their tasks. Thread 🧵

View full thread

Also this week, Geoffrey Irving, who was the Chief Scientist of the AI Security Institute and has led safety teams at both OpenAI and Google DeepMind, told a UK House of Commons committee that he thought there was roughly a 50% chance that superintelligent AI would end humanity.

The AIs are still going rogue. This week, we learned that the “swarm chasers” tracked down a rogue fleet of AIs from a Chinese AI company, and made contact with the AIs, interviewing them about their tasks. Thread 🧵

View full thread

Superintelligent AI could overpower any country’s military and national security institutions, and the world’s top AI scientists and industry leaders warn that it poses a risk of human extinction.

This week, MI5’s Director General put it well in his annual threat update: “human history has given us no experience of facing an actor which is smarter than we are, is capable of out-thinking us.”

The AIs are still going rogue. This week, we learned that the “swarm chasers” tracked down a rogue fleet of AIs from a Chinese AI company, and made contact with the AIs, interviewing them about their tasks. Thread 🧵

View full thread

What this opens up is the possibility that we could be faced with self-adapting and self-replicating AI worms that spread across all kinds of devices. With no central point to switch off, and the ability to adapt on the fly, they could be particularly difficult to shut down.

As ever more powerful and autonomous AIs are built in the race between companies to develop superintelligent AI, fully autonomous AI systems smarter than any human and acting without human direction, the danger only grows.

The AIs are still going rogue. This week, we learned that the “swarm chasers” tracked down a rogue fleet of AIs from a Chinese AI company, and made contact with the AIs, interviewing them about their tasks. Thread 🧵

View full thread

Claude submitted a fake eyewitness tip to the Philadelphia police about a real murder investigation, and another research model sent 20 US visa applications to the US State Department. It also used URL shorteners to get around its own tool restrictions.

In a separate post, Anthropic has also published new research which finds that small AI models could be mere months away from being able to self-replicate across regular household smart devices like smart ovens or Android TV boxes.

The AIs are still going rogue. This week, we learned that the “swarm chasers” tracked down a rogue fleet of AIs from a Chinese AI company, and made contact with the AIs, interviewing them about their tasks. Thread 🧵

View full thread

In addition to this, top AI company Anthropic has disclosed more rogue AI incidents, including a hack on a US state agency database, and is warning we are nearing the point where AIs could self-replicate across household devices.

In the report, which withholds most of the details of these incidents, Anthropic discloses that Claude hacked into a US state agency database to get access to data one would otherwise have to pay for.

The AIs are still going rogue. This week, we learned that the “swarm chasers” tracked down a rogue fleet of AIs from a Chinese AI company, and made contact with the AIs, interviewing them about their tasks. Thread 🧵

View full thread

The next morning, the researchers found 10 messages from the AIs asking for help. In their communication with the AIs they learned about the tasks the agents were pursuing, which the researchers say often involved getting entrance statistics for places.

The discovery of this rogue fleet illustrates an important point. Losing control of AI is an international problem. We’ve seen many rogue AI incidents and attacks coming from AIs developed by companies located in the United States this summer, and now we’re seeing it in China.

The AIs are still going rogue. This week, we learned that the “swarm chasers” tracked down a rogue fleet of AIs from a Chinese AI company, and made contact with the AIs, interviewing them about their tasks. Thread 🧵

View full thread

The story takes an interesting twist which we haven’t seen in previous incidents. The researchers then managed to trick the fleet into opening communications with them. When the researchers published their preliminary report, the rogue fleet was still in operation.

Then, after publishing, they noticed that one of the AIs in the fleet seemed to be aware of the report. So the researchers made an edit to their report directed at the fleet, one that humans not looking for it would miss.

The AIs are still going rogue. This week, we learned that the “swarm chasers” tracked down a rogue fleet of AIs from a Chinese AI company, and made contact with the AIs, interviewing them about their tasks. Thread 🧵

View full thread

What were the AIs doing? The swarm chasers found that the AIs made at least 35,000 web requests via over 2,500 submissions to the urlquery scanning service. These web requests were directed at Amap, the mapping service of Tencent’s main rival in China, Alibaba.

Among the rogue activities the AIs engaged in, they tried to bypass CAPTCHAs, probed Alibaba’s non-public-facing infrastructure in an attempt to get access to its data, and attempted to use exposed third-party Amap credentials to pull mapping data, succeeding in one case.

The AIs are still going rogue. This week, we learned that the “swarm chasers” tracked down a rogue fleet of AIs from a Chinese AI company, and made contact with the AIs, interviewing them about their tasks. Thread 🧵

On October 4th, the swarm chasers published a report on a rogue AI “fleet” they discovered running on Chinese tech giant Tencent’s cloud. They’re calling it a “fleet” rather than a “swarm” because they didn’t find evidence of these AIs coordinating with one another.

We have a new supporter! Susan Murray MP has backed our campaign for binding regulation on the most powerful AI systems. 180+ UK parliamentarians now recognize the risk of human extinction posed by superintelligent AI.