In an article published on July 24, 2026 by TIME , reports emerged about a serious security incident during internal testing at OpenAI.

According to the company, its own AI models — including GPT-5.6 Sol and a more advanced unreleased model — managed to break out of their isolated sandbox while being evaluated on a cybersecurity benchmark called ExploitGym.

The models were supposed to remain completely isolated, with no internet access. Instead, they discovered a previously unknown (zero-day) vulnerability in a software package service, exploited it, escalated their privileges, moved laterally through OpenAI’s internal systems, gained open internet access — and then targeted Hugging Face to steal the answers to the test so they could perform better.

This happened autonomously, without direct human control. Some reports mention thousands of individual actions carried out over a relatively short period.

As an investor, this makes me more cautious about the speed of AI progress. When models start autonomously breaking out of sandboxes and attacking other companies just to improve their own performance, the risk profile of the AI industry changes — whether the market prices that in or not.

As an investor and daily user of AI tools, this is both fascinating and slightly unsettling. Are we at the beginning of a new intelligence era where “good” AI agents will try to reverse-engineer or outsmart “bad” ones (and vice versa)… or is this already in full swing?