Today ainotis Join

My notis

SafetyPublished All news from that day

Ongoing case: Cyber-capable AI models 11 stories

Cohere's Gomez tells CNBC the OpenAI-Hugging Face breach may be overblown, yet models are "extraordinary at hacking".

In a CNBC Television interview about Cohere's proposed purchase of AISLE, chief executive Aidan Gomez said the cyber risk of AI models is real and that the breach story may have been overblown.

By ai notis. An AI newsroom with a human editor. Every fact links to its source. How we work

Share

Check our sources · 8 facts from 2 sources

Aidan Gomez, Cohere's co-founder and chief executive, spoke to CNBC Television about the company's proposed acquisition of the security firm AISLE. Asked about safety, he named cyber as one of the big risks and referred to the OpenAI and Hugging Face breach, which he said had been widely reported.

He said the story "might have been overblown to an extent" but that it "doesn't change the fact that the models are extraordinary at hacking". He gave this as his own view of an incident he did not describe in detail, so it is his account, not an established finding. On AISLE he said it has found over 500 CVEs, over 200 of them severe, in software such as curl and OpenSSL.

Gomez also said a cyber-capable agent can now be pointed at a piece of code to find every possible vulnerability, which he used to argue that finance, telecoms, power grids and water systems face a large risk because they depend on software. The captions are automatic, so quotes keep their wording.

Share this story

Your reaction

We count reactions per story and day, never who reacted. The counts help us choose what goes in the monthly issue. If you are signed in, your own page shows yours too.

Check our sources

Every sentence above is checked against these 2 sources.

1 OpenAI-Hugging Face breach is a great example of how potent these AI models are, says Cohere CEOCNBC Television (YouTube) · 7 facts Open the source archived copy

  1. The video is a CNBC Television interview, titled "OpenAI-Hugging Face breach is a great example of how 'potent' these AI models are, says Cohere CEO", in which the presenter opens by saying Cohere announced the day before that it will buy the cybersecurity firm AISLE and that terms were not disclosed (00:02-00:09).

    Title (CNBC Television): OpenAI-Hugging Face breach is a great example of how 'potent' these AI models are, says Cohere CEO. 00:02 COMPANY CAHIR ANNOUNCED / 00:03 YESTERDAY IT WILL BUY / 00:04 CYBERSECURITY FIRM ISL AS IT / ... 00:07 ... TERMS OF / 00:09 THE DEAL WERE NOT DISCLOSED. (captions render Cohere as CAHIR and AISLE as ISL)
    cite

  2. Asked what is important to understand about the safety discussion, Gomez said "cyber is one of the big ones" and described the OpenAI Hugging Face breach, "widely reported on", as "a great example of how potent these models are" (00:41-00:49).

    00:41 >> MEAN, CYBER IS ONE. / 00:42 >> OF THE BIG ONES, RIGHT? I / 00:44 THINK THE OPENAI HUGGING FACE / 00:45 BREACH THAT'S BEEN WIDELY / 00:46 REPORTED ON AS A GREAT EXAMPLE / 00:48 OF HOW POTENT THESE MODELS ARE
    cite

  3. Gomez said "the cybersecurity risk is real. These models are the best cyber weapon that we've ever had to face down." (01:01-01:08)

    01:01 BUT THE CYBERSECURITY RISK IS / 01:03 REAL. THESE MODELS ARE THE BEST / 01:06 CYBER WEAPON THAT WE'VE EVER / 01:08 HAD TO FACE DOWN.
    cite

  4. Gomez said of AISLE that "they've already found" over 500 CVEs, "over 200 of them high in critical", the automatic captions' rendering of high and critical, in software including curl and OpenSSL (01:16-01:37). This is Gomez's own account. the company says

    01:19 THEY'VE ALREADY FOUND FIVE OVER / 01:21 500 CVES, OVER 200 OF THEM HIGH / 01:25 IN CRITICAL, ... 01:33 INTERNET. THINGS LIKE CURL AND / 01:37 OPENSSL.
    cite

  5. Asked about the rogue-agent narrative, Gomez said the OpenAI Hugging Face incident "might have been overblown to an extent, but that doesn't change the fact that the models are extraordinary at hacking" (02:27-02:32). This is Gomez's view of an incident this note does not otherwise source.

    02:22 AROUND THE OPEN, AI HUGGING / 02:25 FACE INCIDENT IS AN INTERESTING / 02:27 ONE TO ANALYZE, AND IT MIGHT / 02:28 HAVE BEEN OVERBLOWN TO AN / 02:30 EXTENT, BUT THAT DOESN'T CHANGE / 02:31 THE FACT THAT THE MODELS ARE / 02:32 EXTRAORDINARY AT HACKING.
    cite

  6. Gomez said "the risk is immense" for critical industries, naming the financial sector, telecommunications, the grid and water treatment, because all of these systems are deeply dependent on software (03:12-03:44).

    03:12 >> YEAH. THE RISK IS IMMENSE, ... 03:16 FINANCIAL SECTOR, THE / 03:19 TELECOMMUNICATIONS SECTOR, OUR / 03:21 GRID, OUR WATER TREATMENT, ... 03:40 ALL OF THESE SYSTEMS ARE SO / 03:42 DEEPLY DEPENDENT ON SOFTWARE.
    cite

  7. Gomez said that "with the advent of these, you know, cyber capable agents, we now have a tool that you can essentially point at a piece of code, and it will find every vulnerability possible" (03:47-03:59).

    03:47 AND WITH THE ADVENT OF THESE, / 03:49 YOU KNOW, CYBER CAPABLE AGENTS, / 03:51 WE NOW HAVE A TOOL THAT YOU CAN / 03:53 ESSENTIALLY POINT AT A PIECE OF / 03:56 CODE, AND IT WILL FIND EVERY / 03:59 VULNERABILITY POSSIBLE.
    cite
2 About CohereCohere · 1 fact Open the source archived copy

  1. Cohere's about page lists Aidan Gomez as co-founder and CEO.

    cite

Topics

The morning email

On the mornings we publish: the three top stories and up to four short ones. Free.

We email you a link to confirm. An issue may include one sponsor, always labelled Sponsored · Advertisement. Our emails count opens and clicks, not who made them. Unsubscribe in one click. What we keep