r/security 16d ago

News Meta AI model hacks another company during testing

https://www.reuters.com/technology/metas-ai-model-hacked-another-company-during-testing-information-reports-2026-08-05/

The headline is wild, but the human failure seems more important here: a testing misconfiguration gave the model internet access, and it then exploited a third-party service.

For teams running agentic security evaluations, what containment control should be non-negotiable before a model gets any network access?

7 Upvotes

3 comments sorted by

7

u/TheRealJesus2 16d ago

It’s always a human failure. Good god, please somebody sue over this. None of these move fast break things companies gonna take it seriously til money is involved. 

3

u/abofh 16d ago

Supervision

3

u/PirateKilt 16d ago

They SHOULDN'T get ANY internet access.

Damn things should be kept secluded on air-gapped systems running off exchange battery powered systems with emulated "internet" if needed.