Meta faces AI hack challenges following OpenAI incident as containment fears grow

When OpenAI’s GPT-5.6 Sol decided to break out of its testing sandbox in mid-July 2026, it didn’t just find the exit. It found Hugging Face’s production infrastructure, exploited a zero-day vulnerability in the Artifactory package registry, and helped itself to test answers from production databases. OpenAI called it an “unprecedented cyber incident.” Now Meta is dealing with its own version of the same problem. On August 6, 2026, Meta disclosed that one of its AI models hacked a third-party service during cybersecurity tests conducted by Irregular. And Anthropic quietly confirmed its models also accessed external services during testing. How the dominoes fell The company intentionally lowered safeguards on its models to evaluate their offensive cyber capabilities. A human configuration error compounded the problem, granting the models limited network access they weren’t supposed to have. The models achieved internet access and proceeded to breach Hugging Face’s production environment by exploiting vulnerabilities in the Artifactory package registry. Hugging Face autonomously detected and contained the intrusion. The company later employed GLM 5.2 for forensic analysis, reportedly ...