{"id":289863,"date":"2026-07-15T13:09:00","date_gmt":"2026-07-15T17:09:00","guid":{"rendered":"https:\/\/news-you-need.com\/index.php\/2026\/07\/15\/meet-gpt-red-an-llm-super-hacker-openai-built-to-make-its-models-safer\/"},"modified":"2026-07-15T13:35:09","modified_gmt":"2026-07-15T17:35:09","slug":"meet-gpt-red-an-llm-super-hacker-openai-built-to-make-its-models-safer","status":"publish","type":"post","link":"https:\/\/news-you-need.com\/index.php\/2026\/07\/15\/meet-gpt-red-an-llm-super-hacker-openai-built-to-make-its-models-safer\/","title":{"rendered":"Meet GPT-Red: an LLM super-hacker OpenAI built to make its models safer"},"content":{"rendered":"

Meet GPT-Red: an LLM super-hacker OpenAI built to make its models safer<\/a><\/p>\n

https:\/\/www.technologyreview.com\/2026\/07\/15\/1140514\/meet-gpt-red-an-llm-super-hacker-openai-built-to-make-its-models-safer\/<\/a><\/p>\n

Publish Date: 2026-07-15 13:09:00<\/a><\/p>\n

Source Domain: www.technologyreview.com<\/a><\/p>\n

As LLMs become more complex and get used in a wider variety of tasks\u2014especially in the form of agents, which can interact with computer files, websites, and third-party code as well as other agents\u2014it\u2019s hard for teams of people by themselves to keep up with all the types of attacks that might take place. \u201cThe risk surface grows and the blast radius also grows,\u201d says Nikhil Kandpal, a research scientist at OpenAI who co-created GPT-Red.<\/p>\n

OpenAI built GPT-Red to future-proof its safety testing process. \u201cAs more capable models become available, we will have already designed the system that can discover new modes of attack,\u201d says Dylan Hunn, a research scientist at the company and fellow co-creator of GPT-Red. The researchers say it has already come up with new types of attack that had not been seen before.<\/p>\n

OpenAI focused most of its efforts on a type of attack known as a prompt injection, where a hacker slips an LLM instructions to make it do things its developers or users do not want it to, such as copy confidential information, sabotage a company\u2019s code base, or generate embarrassing or harmful output. In theory, such instructions can be hidden in any text that the LLM might encounter\u2014in code or on a website, for example.\u00a0\u00a0\u00a0\u00a0<\/p>\n

Training dojo<\/strong><\/h3>\n

To build GPT-Red, OpenAI\u2019s researchers took an LLM that had not been trained as a hacker and set it up in what\u2019s known as a self-play loop with several other models. Its goal was to try to attack the other models; their goal was to try to defend themselves. Over many rounds of play, GPT-Red became better and better at attacking other LLMs, and those LLMs became better and better at fending off the attacks.<\/p>\n

The training took place in a kind of dojo that OpenAI had designed to mimic a range of scenarios in which LLMs might be deployed in the real world, including browsing the web, reading emails or calendar apps, and editing code.\u00a0\u00a0<\/p>\n

When GPT-Red found a new kind of attack, it would explore…<\/p>\n

Source<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Meet GPT-Red: an LLM super-hacker OpenAI built to make its models safer https:\/\/www.technologyreview.com\/2026\/07\/15\/1140514\/meet-gpt-red-an-llm-super-hacker-openai-built-to-make-its-models-safer\/ Publish Date:…<\/p>\n","protected":false},"author":1,"featured_media":289864,"comment_status":"closed","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"https:\/\/wp.technologyreview.com\/wp-content\/uploads\/2026\/07\/spar-red.jpg?resize=1200,600","fifu_image_alt":"","footnotes":""},"categories":[14],"tags":[17],"class_list":["post-289863","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-artificial-intelligence","tag-llm"],"_links":{"self":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/289863"}],"collection":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/comments?post=289863"}],"version-history":[{"count":1,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/289863\/revisions"}],"predecessor-version":[{"id":289865,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/posts\/289863\/revisions\/289865"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/media\/289864"}],"wp:attachment":[{"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/media?parent=289863"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/categories?post=289863"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/news-you-need.com\/index.php\/wp-json\/wp\/v2\/tags?post=289863"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}