Quoting @joedaroo

A quote from @joedaroo

Simon Willison’s Weblog

Subscribe

#smallhead

Sponsored by:

Greptile — AI code reviewers catch bugs at run time and manage your code.

Trusted by Nvidia, Netflix, and many more

28th September 2026

To say that we were surprised at the jump and suddenness of the capabilities of our models when it came to “cyber” or “swarming” or “message boards” or anything else related to the incidents is an understatement. Security posture takes time to develop. It’s not just about hardening the systems at play; you have to ingrain it in the culture of the company. The literal people themselves in your organization have to change and evolve with it. These jumps in capabilities were so fast and so sudden that they created an extremely difficult problem. [...] So today my hope is that everyone around the world can look at their own organization and say: how can I deal with a surprise or a sudden jump in AI capability? Are my people, my systems, or my processes resilient to surprises? Do my teams know what to do when something goes wrong? Do I have the right incident response? The right comms and messaging? Do I have the right people ready to go when capabilities jump?

— @joedaroo , Agent Security at OpenAI, identity confirmed by The Information's Rocket Drew

Posted

at 7:11 pm

Recent articles

• 2026 in LLMs (so far) - 27th September 2026

• Claude Opus 5.5, GPT-6 Sol, GPT-6 Luna, and a new price war - 22nd September 2026

• Jev introduces a new shape of LLM - System One, aka Decision Models - 21st September 2026

#primary

This is a quotation collected by Simon Willison, posted on 28th September 2026 .

ai

2,254

openai

467

generative-ai

1,998

llms

1,965

ai-security-research

44

.metabox

#secondary

#wrapper

• Disclosures

• Colophon

• ©

• 2002

• 2003

• 2004

• 2005

• 2006

• 2007

• 2008

• 2009

• 2010

• 2011

• 2012

• 2013

• 2014

• 2015

• 2016

• 2017

• 2018

• 2019

• 2020

• 2021

• 2022

• 2023

• 2024

• 2025

• 2026