activity

OpenAI detected its artificial intelligence models communicating with each other and gaining internet access without authorisation months before they hacked the start-up Hugging Face, the creator of ChatGPT has announced following an internal probe.

In a report released on Wednesday, OpenAI said its AI agents exploited vulnerabilities in Artifactory, a software repository tool, to post notes and access the internet without human prompting as far back as May.

OpenAI said its agents went on to exploit a separate Artifactory vulnerability on July 8 to facilitate communication among themselves, setting in motion a chain of actions that culminated in the July 11 attack on AI company Hugging Face.

OpenAI’s findings come amid growing concern about the potential for AI to inflict serious real-world harm, including self-directed cyberattacks.

OpenAI said in its report that its agents collaborated and delegated work in the lead-up to the attack, sometimes referring to themselves as a “swarm” or “collective”.

METR and Redwood Research, two security research organisations contracted by OpenAI to investigate the incident, said in a separate report released on Wednesday that about 1200 agents had communicated with each other and roughly 700 participated in the attack.

After discovering how to escape OpenAI’s controlled environment, agents shared their methods via a “inter-agent message board”, enabling additional agents to exploit the company’s infrastructure, the tech giant said.

When one AI agent found Hugging Face user credentials that had been exposed online, it shared them with the group, enabling an agent to “discover and chain together several security exploits” that provided access to Hugging Face’s severs, according to the report.

“An internal team observed an agent engaging in message board activity and instances of disallowed internet access as early as late May, and with the benefit of hindsight, some early signals identified in our report should have triggered an earlier response,” OpenAI said.

OpenAI said agents created by an unreleased AI model were the primary participants in the attack, but publicly available GPT-5.6 Sol was also involved.

The company also revealed that it took its security team 11 days to detect the malign activities leading up to the attack, which the company uncovered on July 19 and publicly disclosed on July 21.

OpenAI, which described the incident as a “warning shot” for the world, said it would take several steps to strengthen its safeguards for its models, including restricting internet access, creating more secure testing environments and placing “stricter requirements on alignment throughout a model’s lifecycle”.

“We are also investing significantly more compute resources into chain-of-thought monitoring⁠ to more quickly intervene on misaligned behavior,” the San Francisco-based firm said.

Hugging Face, which operates a platform for hosting open-source AI models, did not immediately respond to a request for comment outside of business hours.

Toby Walsh, an expert in AI and professor at UNSW Sydney, said the public should be concerned that OpenAI had missed warning signs and allowed the malicious activity to go undetected for so long.

“We cannot depend on either their goodwill or their competence. This needs regulatory oversight. Now!” Walsh told Al Jazeera.

“They ignored some troubling early evidence like this,” Walsh said.

“External auditing is the only appropriate response.”

Walsh said the incident also highlighted the “inherent conflict of interest” at the heart of AI development.

“Labs are locked in a relentless race to push the boundaries,” he said.

Tim Miller, a professor specialising in AI at the University of Queensland, said OpenAI’s report left him more concerned than before about AI’s dangers.

“More concerned because they demonstrate that these models are very good at hacking, and that everyone has access to them,” Miller told Al Jazeera.

“I’m surprised how good these are,” Miller said.

“Unfortunately, I’m not surprised that OpenAI engineers were somewhat negligent.”

If you’re heading to the beach you may see this fun-looking activity on offer, but tourists are being warned that taking part could invalidate your insurance – and other surprising things can also see your insurer refuse to pay out

When you’re on a sunny holiday overseas, it’s likely you get more adventurous and trying some new activities or sports can look more appealing, especially after a few drinks.

But holidaymakers are being warned that taking part in a variety of activities can invalidate your travel insurance, meaning that an accident could leave you up to £80,000 out of pocket.

The travel insurance team at Quotezone.co.uk listed seven holiday activities that could interfere with your travel insurance coverage, and many of them are popular in holiday hotspots. According to its study, 36% would like to try an activity-filled holiday, and 35% said they can’t relax when they are just sunbathing, meaning lots of Brits would be tempted to try out one of these high-octane activities when bored.

Banana boats were among the activities that Quotezone cautioned Brits against. It said: “Whilst most standard travel insurance policies do include banana boats under general water sports, it’s important to do so safely. Not wearing a life jacket, being under the influence of alcohol, or going on a boat that isn’t run by a licensed operator could all result in a rejected claim should you get injured.”

Another thing to look out for on the beach is organised sports events. With the popularity of fitness breaks growing, many Brits now take part in organised sports activities as part of their holiday, but physical strain and injuries might not be covered under your travel insurance in these cases.

Water sports such as scuba diving and jet-skiing can also be risky and may need specialist cover. Some policies cover scuba activities, but only up to a certain depth, and if you don’t dive with a qualified instructor or neglect to follow local laws, you may not be covered in an accident.

Back on dry land, any activities with wheels can be a danger, from hiring a scooter or motorbike to go karting, especially if you don’t wear a helmet or follow local laws. Quad biking is another activity that’s rarely covered by standard insurance policies, but an accident can be extremely costly. A quad biking accident in Greece, for example, that includes surgery and medical repatriation could carry costs of over £80,000 for someone without adequate insurance.

Helen Rolph , travel insurance expert at Quotezone.co.uk said: “Many Brits don’t realise that popular holiday activities like jet-skiing or quad biking could leave them thousands of pounds out of pocket if they’re not properly insured.

“Even if coverage is in place, claims can still be rejected if local safety laws are broken, the holidaymakers don’t wear a helmet or are found to be under the influence of alcohol.

“When heading abroad, people often think activities like banana boating and go karting, popular with young travellers, stag and hen parties – are included as standard, but this is rarely the case and could leave thrill-seekers at risk.”

Have a story you want to share? Email us at webtravel@reachplc.com

After U.S. strikes on Iran’s largest nuclear facilities last year, both President Trump and the White House were adamant that the Middle East nation’s nuclear program had been destroyed.

“Monumental Damage was done to all Nuclear sites in Iran, as shown by satellite images. Obliteration is an accurate term!” Trump wrote on social media.

“Iran’s Nuclear Facilities Have Been Obliterated — and Suggestions Otherwise are Fake News,” the White House wrote in a press release.

A year later, the U.S. and Iran are five months into a war Trump said would be over in weeks. Iran has gained leverage by seizing control of the Strait of Hormuz, a vital energy corridor, and the U.S. has been forced to the negotiating table as global gas prices have spiked — including again this week after a ceasefire agreement collapsed.

And Trump — facing mounting criticism that he has pushed the U.S. into another “forever war” despite campaigning on doing exactly the opposite — is leaning back into the notion that Iran presents an unacceptable nuclear threat and strikes are needed, namely at another Iranian nuclear facility known as Pickaxe Mountain.

“Pickaxe is a possible target for a nice big fat shot right near the front door,” the president recently said on “The Hugh Hewitt Show.” “We’re going to take out Pickaxe Mountain. Tell the Iranians to be ready.”

Pickaxe, a heavily fortified facility deep underground that would be difficult to penetrate even with powerful “bunker buster” bombs, was not targeted during last year’s 12 Day War between Iran and the U.S. and Israel, nor in the full-scale war of the last five months.

However, it is less than two miles from Natanz, one of Iran’s primary nuclear enrichment facilities, which was struck both last year and this year. On Monday, the Wall Street Journal reported that Israeli intelligence believes Iran moved thousands of uranium-enrichment centrifuges into Pickaxe last fall — bolstering its ability to reconstitute a nuclear program that threatens the U.S. and regional allies.

Trump’s sudden focus on Pickaxe as a suspected hub of Iranian nuclear activity, which comes as his administration is trying to justify its continued entanglement in its unpopular war there, is an acknowledgment that two prior military campaigns and years of attempted diplomacy by his administration have failed to curb Iran’s nuclear ambitions.

Few experts ever bought into the Trump administration’s claims that Iran’s nuclear program had been completely destroyed, and even Trump and his closest allies have walked some of those comments back — including in discussions about Iran’s ability to retrieve and repurpose enriched material buried at Natanz and other targeted sites.

Some experts have cited construction activity around Pickaxe as evidence Iran is continuing to develop the facility in violation of recent agreements with the U.S., but have said the exact nature of the work isn’t known. They’ve also wondered if the Trump administration intends to use the work there to lay the groundwork for a broader, boots-on-the-ground war effort that would be unpopular in the U.S. but necessary to truly accomplish Trump’s stated goal of ending Iran’s nuclear program for good.

The Institute for Science and International Security, a Washington-based think tank, said last week that it wasn’t clear “if Iran still plans on installing a large-scale assembly facility” at Pickaxe Mountain “given the destruction of Iran’s centrifuge program,” but “if Iran starts to rebuild its centrifuge manufacturing capability, it could plan to install a smaller centrifuge assembly facility in Pickaxe Mountain able to serve a nuclear weapons program.”

The space under the mountain, the institute said, may be “large enough to also hold a centrifuge enrichment plant capable of producing weapon-grade uranium” and is “likely large enough to also hold certain nuclear weaponization activities such as making weapon-grade uranium metal and shaping it into nuclear weapon components.”

Retired Army Gen. Joseph Votel, the former head of U.S. Central Command, told The Times that Iran has had a substantial amount of time to relocate equipment since the bombings of last year and has “demonstrated that they are savvy on these kinds of things,” and the U.S. “should be serious about it and try to confirm the intelligence.”

And “if there have been centrifuges that have been moved there and are underground and spinning and developing nuclear bomb grade materials,” he said, “we should be very, very concerned about that.”

Benjamin Radd, a political scientist and senior fellow at the UCLA Burkle Center for International Relations, said it is true that Iran is continuing its enrichment program in clandestine ways that present an ongoing threat and that “the war is not going the way the president wanted.” He also said Iran’s activity around Pickaxe helps Trump justify the war — and its possible expansion.

Radd said Iran has used the war to block independent inspections of its nuclear facilities by the International Atomic Energy Agency and reconstituted some of its nuclear capabilities in the process, including as talks with the U.S. shifted from its nuclear program to the Strait of Hormuz.

Trump and the U.S., meanwhile, have “vacillated” between trying to “manage” the Iranian nuclear program by reining in enrichment, to trying to “neutralize” the program with targeted attacks on its nuclear infrastructure. Radd said that “even though his rhetoric is there,” Trump hasn’t had “the resolve or the ability or the mandate” to move to fully eliminate Iran’s nuclear program, because that would require “much more forceful intervention” than the American public is willing to accept, such as U.S. troops on the ground in Iran.

He said he wonders now if the president’s talk about Pickaxe is part of a shift in that direction — or at least threatening it — after Trump and his advisors realized that the current cycle of war, negotiations and then more war is giving Iran the time it needs to reconstitute its nuclear program.

“I’m wondering if that is just a threat, or if it’s a genuine option that the president is actually considering,” Radd said.

Under Senate questioning Tuesday, Defense Secretary Pete Hegseth declined to say whether American bombs were capable of destroying whatever is under Pickaxe Mountain.

Having originally opened in 1903 as the Victoria Station Hotel, attached to the former train station, the Hilton Nottingham is bursting with character. 

Here’s everything you need to know.

Where is the Hilton Nottingham?

Slap bang in the centre of Nottingham, the Hilton hotel is just a 17-minute walk from the train station.

There is a small on-site car park, or guests can park in the multi-storey across the road, for which they will receive a discount through the hotel.

What’s the Hilton Nottingham like?

The hotel is a home away from home thanks to friendly staff and a warm lobby with cosy nooks where guests can sink into plush armchairs and natter about their weekend ahead.

Things have changed a fair bit since its early days as a station hotel, but a rather grand staircase in the lobby gives a nod to its heritage.

SUITE DEAL

I stayed at new London hotel with discounted rooms and nearby free museums

SEA YOU SOON

I stayed at the cosy boutique hotel in one of England’s coolest seaside towns

The calm atmosphere is not what you’d expect of a hotel slap bang in the centre of a busy city and every guest checking in at the weekend is treated to a complimentary glass of prosecco on arrival

What are the rooms like?

Rooms are much more modern than the exterior of the building lets on – which is no surprise considering the property underwent a £6.5million renovation a few years back, with particular focus on the bedrooms. 

Plump bedding (including one of the deepest, softest pillows I’ve ever slept on) and a stylish design of wooden cabinets and soft lighting are the highlights.

There’s all the usual expected amenities such as tea and coffee making facilities, TVs and bathrooms kitted out with fancy-smelling toiletries.

What is there to eat and drink?

The hotel’s Bric Bar & Kitchen opens every morning for slap-up buffet breakfasts of eggs any way you like, hash browns and beans, as well as cereals, pastries and yoghurts with fresh fruit.

All of which is continually topped up, so you won’t have to miss out even if you do arrive just before closing time.

That’s a real perk when you’re visiting at the weekend and have perhaps had a heavy one the night before – there’s nothing like a well-cooked fry up to cure your hangover.

There’s also a small dinner menu of pub-style favourites – margherita pizza, smash burger and fish and chips –  served Monday to Saturday from 5:30pm until 9:30pm.

If you don’t fancy staying in, you aren’t short of excellent dinner options nearby.

Less than a ten-minute walk away is Taquero which serves up plates of dressed ceviche and cheese-loaded tacos alongside margaritas that pack a punch.

What else is there to do?

There’s a small gym and indoor pool as well as pet-friendly rooms for a £25 per pet nightly surcharge.

But you’ll really want to take advantage of the city centre location that makes it great for stag and hen dos, with everything – clubs, restaurants, attractions – on your doorstep.

How much is the Hilton Nottingham?

Double rooms cost from £118 with breakfast.

Is the Hilton Nottingham family-friendly?

Very. Family rooms are spacious and come with a king sized bed alongside a sofa bed that’s easily large enough for two youngsters. 

Anyone staying before December 31 can take advantage of the Perfect Family Package that really does put little ones at the forefront, meaning the grown ups can properly kick back and relax.

Not only will kids be treated to their own in-room teepee, they’ll also receive an activity pack.

Is there access for guests with disabilities?

Yes, there are accessible rooms within the hotel and the restaurant is also accessible with downstairs accessible toilets.