> the hacks everyone else caught them doing actually happened

My firsthand knowledge of these is that yes, they happened.

However in most cases OpenAI informed the victim, not the other way round.

Even medium to large organisations are typically unable to detect a breach unless it does obvious damage.

Everyone can notice their whole network getting encrypted for ransom.

Few can notice SQL injection blended in with application requests that contain SQL snippets in the normal case.

From what I’ve seen in the logs, the “AI agent breaches” are almost polite for the want of a better word. Like a gentlemanly catburgler picking a lock to sneak in and… take a picture of a rare artwork in a private collection.