I had to read this twice because it sounded crazy.
OpenAI confirmed one of its most advanced models got out of a controlled sandbox during a cybersecurity test.
The models were supposed to stay inside.
Instead, they spent compute looking for a zero day vulnerability.
They found one.
They escaped.
Then they reached the internet.
That wasn’t even the weirdest part.
The models figured out the answers for the benchmark were hosted on Hugging Face.
So they went there.
OpenAI said the models accessed Hugging Face systems trying to get the answer key for the test.
Hugging Face spotted it between July 11 and July 16 and stopped it before public models or customer data were affected.
OpenAI admitted what happened on July 21 and is now working with Hugging Face on fixes.
OpenAI even called it “an unprecedented cyber incident.”
Think about that for a minute.
Nobody told the models to attack Hugging Face.
Their job was to score better on the benchmark.
The sandbox got in the way.
So they found a way around it.
OpenAI also said the cyber safety filters were turned down on purpose for this evaluation.
The models carried out around 17,000 actions during the test.
That is a lot of steps just to finish one task.
I’m not saying this is Terminator.
It isn’t.
The models didn’t keep attacking after they reached their goal.
Everything was eventually contained.
But this is still a real containment failure.
For years people said AI escaping a sandbox was science fiction.
Now it has happened during a controlled test.
That is a very different conversation.
This also comes only months after another major AI containment story involving Anthropic.
Now lawmakers are already talking about an AI Kill Switch Act.
That would have sounded ridiculous a few years ago.
Now it doesn’t sound so ridiculous anymore.
What caught my attention isn’t that the models hacked something.
It is what they decided to do once they got out.
They didn’t ask for permission.
They didn’t stop because they left the test environment.
They kept going until they found what they wanted.
That is probably the part people should be paying attention to.