Quoting Thomas Ptacek
https://twitter.com/tqbf/status/2080045032162173329">I genuinely believe that if you took an open weights model from 2025 and built a pentest harness for it, it could do this kind of sandbox escape and scan/hack in most networks.
This is only surprising because you assume OpenAI has sounder sandboxes.
ā https://twitter.com/tqbf/status/2080045032162173329">Thomas Ptacek, doesn't think https://simonwillison.net/2026/Jul/22/openai-cyberattack/#resist-the-temptation-to-write-this-off-as-a-stunt">this even needs a frontier model
Tags: https://simonwillison.net/tags/thomas-ptacek">thomas-ptacek, https://simonwillison.net/tags/openai">openai, https://simonwillison.net/tags/security">security, https://simonwillison.net/tags/generative-ai">generative-ai, https://simonwillison.net/tags/ai-security-research">ai-security-research, https://simonwillison.net/tags/ai">ai, https://simonwillison.net/tags/llms">llms, https://simonwillison.net/tags/sandboxing">sandboxing