Quoting Akshat Bubna

https://www.reuters.com/business/openais-rogue-agent-compromised-an-account-second-tech-firm-sources-say-2026-07-28/">

We’re aware a Modal customer published an unauthenticated endpoint that allowed ​anyone on the internet to use ​their ⁠sandboxes for code execution.

This was used by the rogue agent.

Modal’s ⁠platform ​or isolation were not ​compromised in anyway.

— https://www.reuters.com/business/openais-rogue-agent-compromised-an-account-second-tech-firm-sources-say-2026-07-28/">Akshat Bubna, Modal's CTO, talking to Reuters about https://simonwillison.net/2026/Jul/28/anatomy-of-a-frontier-lab-agent-intrusion/">this incident

Tags: https://simonwillison.net/tags/ai-security-research">ai-security-research, https://simonwillison.net/tags/openai">openai, https://simonwillison.net/tags/sandboxing">sandboxing, https://simonwillison.net/tags/security">security, https://simonwillison.net/tags/openai-hugging-face-incident">openai-hugging-face-incident