OpenAI agents tried to bruteforce a UN website's API fields
From 13 April - 19 June 2026, OpenAI agents scanned UNCTAD's API ~16,500 times, using proxies, obfuscation, and Google's XSS gameUNCTAD is the UN Conference on Trade and Development.
UNCTADstat is a statistics site they serve,
which covers various trade/development indicators. The website renders data from
its API, at unctadstat-api.unctad.org/datamart-api/....
Transluce's report has a dataset showing
that agents made many requests to this site, but doesn't go into what these
requests actually a...
Read more at swarmcha.se