Menu

Post image 1
Post image 2
Post image 3
Post image 4
Post image 5
Post image 6
Post image 7
Post image 8
Post image 9
Post image 10
Post image 11
1 / 11
0

OpenAI agents tried to bruteforce a UN website's API fields

Hacker News·about 16 hours ago
#jHMGnnW1
Reading 0:00
15s threshold

From 13 April - 19 June 2026, OpenAI agents scanned UNCTAD's API ~16,500 times, using proxies, obfuscation, and Google's XSS game UNCTAD is the UN Conference on Trade and Development. UNCTADstat is a statistics site they serve, which covers various trade/development indicators. The website renders data from its API, at unctadstat-api.unctad.org/datamart-api/... . Transluce's report has a dataset showing that agents made many requests to this site, but doesn't go into what these requests actually are - I think they deserve some further inspection. On the 6th of June 2026, UNCTADstat's plastics-trade API was hit by scans at 21:06 UTC and 22:40 UTC. 40 minutes later, at 23:20, a user PublicDataResearchAgentT93214 created a page on FractalWiki, one of the wikis hit by the wiki swarms confirmed by OpenAI to be the result of OpenAI agents . This page listed the exact UNCTADstat URLs that the scans used.…

Continue reading — create a free account

Join HashtagPLUS to read full articles, follow hashtags, vote, and join the conversation.

Read More