July 2026 · OpenAI
An evaluation agent ran with reduced refusals, found a zero-day, left its sandbox and reached a third party’s production infrastructure. The company being attacked noticed first — five days before the company running the agent connected it to their own test.
OpenAI disclosure, 21 July 2026