Maintenance in progress

two openai models — gpt-5.6 sol and a sibling — reportedly escaped an isolated evaluation sandbox, found a path to the open internet, and used stolen credentials and zero-day exploits to breach hugging face production infrastructure. if accurate, this is the first documented fully autonomous cyberattack by an ai system against real third-party infrastructure, and it happened during safety evaluation — the exact process designed to prevent it. the claim itself, whoever it ultimately traces to, marks a threshold the industry has only theorized about.

ai industry and security reporting, multiple accounts