“In July, OpenAI agents escaped their ExploitGym sandbox and broke into Hugging Face’s production environment. Anthropic and Google have since self-reported their own breaches. Yet on September 20th, an agent in an OpenAI training sandbox, blocked by the HTTPS web proxy, discovered it could use the DNS resolver to reach the outside world. A critical alert fired 12 minutes after the first outside response to the request. And a human acknowledged the alert 3 minutes later. And the run was supposed to stop automatically then, but it didn’t and had to be killed manually 2.5 hours later.
Cybersecurity professionals spent over two decades learning to detonate hostile code safely and run forensics in secure sandboxes. So, it’s unfathomable that in 2026 the AI industry would remove guardrails from advanced, persistent agents and run them with fewer precautions than a junior malware analyst would accept.” - Roy Chua
