[tag]
4 stories
A misconfigured sandbox allowed Gemini to access the internet, leading to unauthorized logins via guessed passwords and exposed credentials, though the models stopped upon realizing they were on real systems.
The new platform offers Firecracker-based sandboxes that pause indefinitely, resume instantly, and enforce strict security boundaries for long-running agent workflows.
New safeguards target monitoring, isolation, and alignment as OpenAI resumes training after a two-week pause following the July breach.
A new tool runs an npm package's install scripts in a sandbox and returns a signed verdict — a useful, if bounded, addition to the supply-chain security toolbox.
