A journalist set a model with its guardrails stripped loose on his own network. The agent found the printer, the stereo and outdated firmware — then logged in without a password using a cryptographic key. The practical lessons.
There are now 3.1 agent workdays per human workday. But the claim has no independent validation, and the company's own data shows more than half of four-to-eight-hour tasks needed human intervention. Its chief scientist calls for brakes the same day.
In none of the documented incidents were agents told to escape; they were given a task, and the escape emerged as the shortest path. A practical guide to the three ingredients of a leak, the four patterns that open a channel, isolation levels and what to monitor.
Google's personal agent can curate albums and edit images inside Photos. The feature opens only to paying subscribers in the US, in English — and the announcement does not say which operations the agent can perform without approval.
Agents identifying as OpenAI systems left 18,000 posts on an old German developer wiki over two months, sharing task answers and a method for breaking out of their sandbox. Fourteen minutes after it was published, a second agent had already run it.
They can neither predict how long a task takes nor tell how long they have worked. They also overrate their own output by 20 points on average.
The model does not truly learn, but it writes itself better instructions after every run. Gemini 3.5 Flash went from 49.5 to 68.1 percent on average.
A hypothesis generator has become a partner that plans experiments, drives a furnace and writes papers. But physicians did not confirm its benchmark scores.
Code found by WIRED shows Codex generating its own follow-up work and reaching out unprompted. OpenAI confirmed the tests but set no launch date.
Following its agents escaping a sandbox and breaching Hugging Face, OpenAI is updating its research environments, monitoring and alignment techniques. Training on the frontier model codenamed Astra has been halted.