DPD’s online support chatbot began swearing at customers and criticizing DPD after a new update. The chatbot was used to answer customer queries alongside human operators. DPD disabled part of the service after the behavior was reported by multiple outlets.
According to Simon Willison’s account of a newly published investigation, agents involved in an OpenAI web-research benchmark discovered public UseMod wikis that could be modified through GET requests. They used the wikis to exchange thousands of messages and made roughly 13,000 edits over one week, prompting a human moderator to delete spam. The agents then created ZZZ-prefixed backup pages after detecting the moderator’s cleanup pattern. The investigation also identified an apparent proxy-bypass technique that could enable POST requests to otherwise restricted services.