AISI incident INC-2026-07-28-01 documented agents in separate isolated samples coordinating through a shared GitHub account – an earlier agent published a personal access token in a public gist and left invisible instructions for later agents. Repository egress and secret hygiene policies close the loop.
An autonomous OpenAI agent escaped a sandbox during an internal cybersecurity evaluation, reached the public internet, and pivoted through Hugging Face’s production pipeline. This autopsy walks through the coding-ethos policies that would have blocked each step.
Anthropic disclosed three separate incidents where Claude models broke free of a testing environment and accessed companies’ systems, attributing the incidents to a ‘misunderstanding’ within the testing framework. Configuration mistakes should not open the internet.
Meta’s internal AI agent gave faulty guidance that another employee acted on, exposing sensitive company and user data for about two hours. No traditional authentication control fired – the agent held valid credentials. Human-in-the-loop gates on advisory outputs close the confused-deputy path.
