No new legislation or regulation required, this was a crime and the CEO of the company responsible should be prosecuted. 'oh my software did it' is no excuse.
This is not AI agents going rogue, but OpenAI. This hack took the company months to notice and then they notified a public email address rather than the appropriate government agency. www.ft.com/content/5613... OpenAI ‘agent’ hacked an Australian health service website