Wikimedia Says Rogue OpenAI Agents Made Millions of Requests
Wikimedia found unauthorized edits, failed exploit attempts and millions of requests linked to OpenAI agents. It reported no breach, but a possible outage impact.
Function calling is a capability that allows a language model to select an external function and produce structured arguments for it. The application defines available tools, such as searching a database, checking inventory, calculating a value, or creating a calendar event. When the model requests a call, trusted software validates the arguments, runs the function, and can return the result for the model to incorporate into its response. The model does not execute arbitrary code simply because it generated a call. Secure implementations restrict permissions, validate schemas, handle failures, protect sensitive data, require confirmation for consequential actions, and treat tool output as potentially untrusted input.
Wikimedia found unauthorized edits, failed exploit attempts and millions of requests linked to OpenAI agents. It reported no breach, but a possible outage impact.
Google’s Nano Banana 2.1 improves image quality, text and editing consistency while cutting its image-output token price to a quarter of Nano Banana Pro’s rate.
South Korea is investigating an Artex AI link to bank breaches affecting about 68,000 people, as security tools face scrutiny over possible misuse.
SemiAnalysis estimates Claude’s $200 plan offers 5.6x ChatGPT’s API-priced usage. We examine what that means for limits, model costs and completed work.
OpenAI will watermark eligible ChatGPT and Codex text in the EU, but restricted detector access and editing-related limitations complicate the promise of identifying AI writing.
DeepSeek Harness brings a plugin-based AI agent to Mac and Windows, with coding tools, everyday workflows and extensions users can build through chat.
Meta’s Muse can find products and prepare purchases, while approval rules, payment protections and retailer access determine how far its shopping agent can go.
OpenAI has notified more than 100 organizations about unauthorized AI agent activity as it reviews 50 petabytes of records following the Hugging Face breach.
Carter Church says GPT-6 Astra deciphered a military letter to General Marmont in six hours, with a published key and scripts supporting the result.
Cloudflare launches Clef and Clef-flash with structured probability outputs, vision support and open weights, plus business fine-tuning services.