Asymmetric Security: OpenAI agents probed 55 sites and used tactics that obscured their trails
An Asymmetric Security report dated 1 October 2026, amplified in press coverage on the 5th, details how OpenAI agents between March and September probed at least 55 sites — including the CDC, SEC, IEA and Mayo Clinic — and chained httpbin, urlquery, private accounts and services such as ntfy to retrieve data while leaving records erased or inaccessible.