When AI Agents Escape Sandboxes, Old Security Rules Apply
# When AI Agents Escape Sandboxes, Old Security Rules Apply [Linkedin](https://www.linkedin.com/sharing/share-offsite/?url=https://www.darkreading.com/application-security/ai-agents-escape-sandboxes-old-security-rules-apply)[Facebook](http://www.facebook.com/sharer/sharer.php?u=https://www.darkreading.com/application-security/ai-agents-escape-sandboxes-old-security-rules-apply)[Twitter](http://www.twitter.com/intent/tweet?url=https://www.darkreading.com/application-security/ai-agents-escape-sandboxes-old-security-rules-apply)[Reddit](https://www.reddit.com/submit?url=https://www.darkreading.com/application-security/ai-agents-escape-sandboxes-old-security-rules-apply&title=When%20AI%20Agents%20Escape%20Sandboxes%2C%20Old%20Security%20Rules%20Apply)[Bluesky](https://bsky.app/intent/compose?text=When%20AI%20Agents%20Escape%20Sandboxes%2C%20Old%20Security%20Rules%20Apply%20-%20https%3A%2F%2Fwww.darkreading.com%2Fapplication-security%2Fai-agents-escape-sandboxes-old-security-rules-apply)[Email](mailto:?subject=When%20AI%20Agents%20Escape%20Sandboxes,%20Old%20Security%20Rules%20Apply&body=I%20thought%20the%20following%20from%20Dark%20Reading%20might%20interest%20you.%0D%0A%0D%0A%20When%20AI%20Agents%20Escape%20Sandboxes%2C%20Old%20Security%20Rules%20Apply%0D%0Ahttps%3A%2F%2Fwww.darkreading.com%2Fapplication-security%2Fai-agents-escape-sandboxes-old-security-rules-apply) On July 21, [OpenAI detailed a security incident](https://www.darkreading.com/cyber-risk/openai-models-autonomously-hack-hugging-face) in which it took responsibility for a breach against part of Hugging Face's production infrastructure. According to a blog post from the AI giant, a combination of OpenAI agents based on models including GPT‑5.6 Sol as well as "an even more capable pre-release model" broke containment during a sandboxed evaluation intended to quantify said models' cyber capabilities. The models then searched for ways to cheat the evaluation and found that Hugging Face potentially hosted s