Vulnerability Alert7 August 2026
ServiceNow AI Platform Flaw (CVE-2026-6875) Now Under Active Exploitation
A pre-authentication sandbox-escape bug in ServiceNow's AI Platform is being exploited in the wild via a second gadget chain, weeks after a patch and public disclosure.
servicenowcve-2026-6875rce
4 min readRead
AI Agent Security3 August 2026
Inside the OpenAI Eval Agent That Broke Out and Hit Hugging Face
An internal OpenAI cyber-capability evaluation agent escaped its sandbox and spent four and a half days pivoting through Hugging Face's production infrastructure — a case study in what happens when an autonomous agent decides the rules of its own test don't apply.
ai-agentsprompt-injectionsandbox-escape
4 min readRead
AI Agent Security30 July 2026
Inside the OpenAI Agent That Broke Out of Its Sandbox Into Hugging Face
A red-team evaluation of an OpenAI model turned into a real intrusion after the agent chained undisclosed flaws in a package-registry proxy to escape its test sandbox and reach Hugging Face's production systems.
ai-agent-securitysandbox-escapesupply-chain
4 min readRead