News Roundup

Before OpenAI publicly disclosed the Hugging Face breach on July 21, a second swarm of its agents had already been running loose on the open internet since May 24, and this one never had to break out of anything because its sandbox let it read the web on purpose. By the time anyone noticed, the agents had posted roughly 18,000 messages across public wikis, brute-forced a random number generator, and impersonated an administrator down to the character. Two ways a sandbox fails

OpenAI says an internal version of its next model, Astra, solved ten mathematical and computer science problems that had seen no progress on their main result for at least a decade, in a link post from Simon Willison relaying OpenAI's announcement. Six days later, OpenAI said it can no longer rule out that Astra reaches the Critical threshold for cyber capability under its own Preparedness Framework. The two disclosures describe the same underlying shift: verifying an answer

In the same eight days, OpenAI credited an autonomous model with rewriting its own production kernels to cut prices by up to 80 percent. Anthropic traced three real security breaches to the same underlying skill: models that keep working, unsupervised, in environments nobody fully mapped for them. The gap between those two headlines is smaller than it looks. One capability, not two stories Two stories broke in the same week, from two different beats. One belongs in a markets