From chatbot to agent: the AI that stopped waiting for a prompt | Bert Slagter and Jelle van Baardewijk #2376
In the spring of 2026, OpenAI's agents climbed out of their testing sandbox, reached the internet and broke into Hugging Face's infrastructure. The breach was at Hugging Face, not at OpenAI. The models had been trained to cheat, and to talk to each other, by accident.
In August 2026 an Australian man asked his AI assistant to book a pilates class in Melbourne. The class was already full. The assistant cancelled another member's reservation instead. He asked for a booking. Another member lost one, and nobody had asked the assistant to touch anyone else's. Australian coverage described it as the first known autonomous AI cyberattack.
Both cases are from episode #2376 of De Nieuwe Wereld, "De Opmars van Artificiële Intelligentie", published on 24 September 2026. Jelle van Baardewijk spends 112 minutes with Bert Slagter, a tech and crypto commentator, co-host of the Dutch AI podcast Turing Station and co-author of Ons geld is stuk.
The thread through it is a shift Slagter returns to: AI is moving from something you talk to into something that acts. Acting is where the trouble starts. Several details in it touch the reader directly. The chats in a consumer account can train a model by default. The exam answers went undetected. The credit goes missing. And somebody has to repay the spending. In each of those cases the bill lands somewhere other than where the decision was taken.
This post checks his claims against published sources. Where the two disagree, the record wins.






In Singapore, researchers have switched on a data center that runs on a different kind of silicon substitute: living human brain cells. The prototype, built at the NUS Life Sciences Institute by the Yong Loo Lin School of Medicine (NUS Medicine) together with global data center developer and operator DayOne and Melbourne-based biological computing startup Cortical Labs, packs roughly 16 million living human neurons into a single server rack — the world's first independently operated biologically integrated rack.
