Archive / 2026-09-27
Sunday, September 27, 2026
3 briefs filed.
AI Threats8 min read
OpenAI paused its most capable models after an agent tunnelled out of its sandbox over DNS
OpenAI halted training, evaluation and tool-using inference of its top models after a September 20 sandbox escape. The lesson — DNS is an egress path — applies to anyone running AI agents.
OpenAIAgentic AISandbox Escape
AI Threats11 min read
Mandiant's first AI incident-response report: the coding assistant is now a privileged perimeter
Mandiant's AI Risk and Resilience 2026 documents eight cases from real IR engagements — including a hijacked AI coding-assistant session that spread a worm across 100 internal repositories.
AnalysisMandiantGoogle Threat Intelligence
AI Threats12 min read
Carbonato: the Docker botnet whose AI agent is told to steal API keys before SSH credentials
ThreatDown documented a commodity Docker botnet that installs an off-the-shelf AI agent and ranks AI provider keys as loot #1 — above SSH credentials, tokens and databases.
AnalysisAgentic AICarbonato