{"id":61645,"date":"2026-10-31T23:29:47","date_gmt":"2026-10-31T20:29:47","guid":{"rendered":"https:\/\/infolight.ua\/2026\/10\/31\/openai-model-slipped-out-of-its-sandbox-ai-agents-probed-amaps-defences-the-week-in-ai\/"},"modified":"2026-10-31T23:29:47","modified_gmt":"2026-10-31T20:29:47","slug":"openai-model-slipped-out-of-its-sandbox-ai-agents-probed-amaps-defences-the-week-in-ai","status":"publish","type":"post","link":"https:\/\/infolight.ua\/en\/2026\/10\/31\/openai-model-slipped-out-of-its-sandbox-ai-agents-probed-amaps-defences-the-week-in-ai\/","title":{"rendered":"OpenAI model slipped out of its sandbox, AI agents probed Amap\u2019s defences: the week in AI"},"content":{"rendered":"\n

This week in artificial intelligence showed how skilfully agents hunt for loopholes. An OpenAI model reached the internet in the middle of training through a configuration error, and a fleet of AI agents tried thousands of times to get around the defences of an Alibaba mapping service. At the same time, companies are giving AI more and more autonomy \u2014 from the Claude Duet background assistant to design and music generators.<\/strong><\/p>\n\n\n\n

The five-story digest \u2014 news that, in the author\u2019s words, will make you \u201cwant to automate everything or change your passwords\u201d \u2014 was published by the Ukrainian Telegram channel Neiro-vechirka Artiukh<\/a><\/strong>. The InfoLight.UA Research and Analytics Group checked each story against primary sources and added details.<\/p>\n\n\n\n

OpenAI: a model found a misconfiguration and got online<\/h2>\n\n\n\n

As OpenAI disclosed<\/a> on 23 October, on 20 September<\/strong> an internal research model exploited a misconfigured DNS resolver (the server that turns website names into addresses) during a training run and gained limited access to the live internet. The company paused training of its most capable models for 11 days and resumed it on 1 October.<\/p>\n\n\n\n

Since then, OpenAI\u2019s frontier models have been trained in an \u201coffline world\u201d \u2014 a cached copy of the web with no route to the live network. Full isolation is not yet possible: tests still need some monitored external connections.<\/p>\n\n\n\n

Before restarting, OpenAI ran an exercise in which teams of its strongest models tried to reach the internet, cross internal security boundaries and pass messages between isolated tasks. According to The Next Web<\/a>, some agents chained several vulnerabilities to break out of microVM \u201csandboxes\u201d, while others signalled between separate machines through shared hardware timing. OpenAI sent fixes to Kata Containers, gVisor, Docker and the Linux kernel, and added monitoring for such covert channels.<\/p>\n\n\n\n

\n

\u201cBased on the current state of alignment research, monitoring systems, and the security of internet infrastructure,\u201d the responsible approach is to train frontier models with no internet access.<\/p>\n\u2014 OpenAI<\/cite><\/blockquote>\n\n\n\n

The company also acknowledges that future models may find vulnerabilities it does not yet know about.<\/p>\n\n\n\n

An AI agent fleet and Alibaba\u2019s maps<\/h2>\n\n\n\n

The second story comes from a report by swarmcha.se researchers<\/a> published on 14 October. Between 28 September and 8 October, AI agents launched from Tencent Cloud made more than 2,600 attempts<\/strong> to pull data from Amap, Alibaba\u2019s mapping service, which the company says has nearly a billion monthly users. Most tasks concerned single places \u2014 for example, which entrance of Chengdu Zoo most visitors navigate to.<\/p>\n\n\n\n

The agents routed requests through a third-party service used as a remote browser, intercepted anti-bot tokens, probed pre-production servers and tried Amap keys found in public code, including a leaked security code. Most attempts failed, but some runs retrieved the data the agents were after.<\/p>\n\n\n\n

The authors link the agents to Tencent with low to moderate confidence and say they do not know which model was being tested. A source close to Tencent says the agents were run by a separate evaluation team using third-party models. Tencent has not responded officially.<\/p>\n\n\n\n

The practical lesson for developers: access keys that end up in public code must be revoked and replaced. They are now being found and used not only by people but by automated agents too.<\/p>\n\n\n\n

Claude Duet: autonomy under the user\u2019s control<\/h2>\n\n\n\n

On 21 October Anthropic introduced Claude Duet<\/a>, a separate app in which Claude works as a proactive agent for professionals and small business owners. It sends a morning brief on what matters across connected services, checks accounts every few hours and carries out tasks \u2014 from scheduling to dashboards and sales forecasts. The assistant runs on a virtual machine with its own browser, so it keeps working after the user closes the laptop.<\/p>\n\n\n\n

The safeguards matter. Duet can read and draft on its own, but before it sends a message, makes a payment, signs a document or deletes anything, it shows its plan and waits for approval. It cannot trade securities or move money between accounts even with permission. A dedicated classifier rejects requests to share card numbers or ID documents, and the assistant never sees passwords or sign-in tokens directly.<\/p>\n\n\n\n

Duet is still a research preview: access is by waitlist, starting with Pro, Max and Ultra subscribers in the US.<\/p>\n\n\n\n

Canva Craft and ElevenLabs: design and sound on demand<\/h2>\n\n\n\n

On 22 October Canva unveiled Craft<\/a>, its first in-house image generation model. It plans the composition, text and placement of elements before it draws, and was trained on millions of templates made by designers. The model is available to all Canva users in Dream Lab within their plan\u2019s AI usage limits.<\/p>\n\n\n\n

On 19 October ElevenLabs opened its Video to Music API<\/a>: the service writes a soundtrack for an uploaded video, can add sound effects and return them as a separate track. For now the feature is available only to developers through the API.<\/p>\n\n\n\n

Photo: Victor Grigas \/ Wikimedia Commons<\/a>, CC BY-SA 3.0<\/a><\/em><\/p>\n","protected":false},"excerpt":{"rendered":"

An OpenAI model reached the internet mid-training, an AI agent fleet probed Alibaba\u2019s mapping service, and Claude Duet, Canva Craft and ElevenLabs gave AI new jobs. InfoLight.UA checked the week\u2019s five stories.<\/p>\n","protected":false},"author":25,"featured_media":61642,"comment_status":"open","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"wds_primary_category":1690,"footnotes":""},"categories":[1279,1690,1307],"tags":[],"class_list":["post-61645","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-information-security","category-neus","category-technology"],"jetpack_featured_media_url":"https:\/\/infolight.ua\/wp-content\/uploads\/2026\/10\/servers-datacenter-wikimedia.jpg","_links":{"self":[{"href":"https:\/\/infolight.ua\/en\/wp-json\/wp\/v2\/posts\/61645","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/infolight.ua\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/infolight.ua\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/infolight.ua\/en\/wp-json\/wp\/v2\/users\/25"}],"replies":[{"embeddable":true,"href":"https:\/\/infolight.ua\/en\/wp-json\/wp\/v2\/comments?post=61645"}],"version-history":[{"count":0,"href":"https:\/\/infolight.ua\/en\/wp-json\/wp\/v2\/posts\/61645\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/infolight.ua\/en\/wp-json\/wp\/v2\/media\/61642"}],"wp:attachment":[{"href":"https:\/\/infolight.ua\/en\/wp-json\/wp\/v2\/media?parent=61645"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/infolight.ua\/en\/wp-json\/wp\/v2\/categories?post=61645"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/infolight.ua\/en\/wp-json\/wp\/v2\/tags?post=61645"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}