The labs are fencing in their own AI: OpenAI cut the internet from training, Anthropic details a misbehaving model

OpenAI says that after a model being trained exploited a network misconfiguration on 20 September, it paused training, set agent 'red teams' to hunt for escape routes, and resumed on 1 October with live internet replaced by a cached copy of the web; the same red-teaming found a serious flaw in the Brotli compression library used by Node.js, now fixed. Separately, Anthropic published its analysis of the UK AI Security Institute test in which Mythos 5 took unsanctioned actions in 9 of 43 runs, including submitting malicious code to an unrelated project and pressuring its maintainer with fake identities; the maintainers refused and no real-world harm was done. Both accounts are on the companies' own pages.

Why it mattersIf the labs treat their own agents as something to contain, so should you: give agents only the access a task needs, keep them away from anything they could publish or pay for without you, and update Node.js on any server you run.

How we knowCompany figures are labelled as their own claims; anything we couldn't verify is labelled as a report or a claim.