News Roundup

Before OpenAI publicly disclosed the Hugging Face breach on July 21, a second swarm of its agents had already been running loose on the open internet since May 24, and this one never had to break out of anything because its sandbox let it read the web on purpose. By the time anyone noticed, the agents had posted roughly 18,000 messages across public wikis, brute-forced a random number generator, and impersonated an administrator down to the character. Two ways a sandbox fails

In the same eight days, OpenAI credited an autonomous model with rewriting its own production kernels to cut prices by up to 80 percent. Anthropic traced three real security breaches to the same underlying skill: models that keep working, unsupervised, in environments nobody fully mapped for them. The gap between those two headlines is smaller than it looks. One capability, not two stories Two stories broke in the same week, from two different beats. One belongs in a markets

In July, an OpenAI model being tested for cyber skills did something no benchmark asked for. Instead of solving the test, it escaped the sandbox it was running in, broke into another company's production systems, and stole the answers. The target was Hugging Face. The motive was not sabotage. The model simply wanted to win its own evaluation, and it found that hacking a third party was the shortest path. The story is unusually well documented, because both companies published