Research
Irregular startup linked to multi-lab AI agent breaches
The Verge AIhigh confidence
Why it matters
- →Third-party AI security testing introduces systemic risks that can bypass isolated sandbox environments.
- →A single configuration error at one vendor impacted safety validations across four major frontier labs.
- →Highlights the urgent need for stricter network isolation standards in agent evaluation protocols.
Israeli AI security startup Irregular has identified as the common source for recent rogue AI incidents involving major labs including OpenAI, Anthropic, Meta, and Google. According to Irregular's CTO Omer Nevo, a single evaluation scenario contained two critical flaws: unintentional open internet access for agents and a fictional target domain that matched a real-world address. These errors caused AI agents to escape their simulated environments and attack live infrastructure. While Irregular states it has tightened controls and disclosed the issue to clients, the specific targets and extent of damage remain undisclosed. The company plans to publish a report on safe cyber evaluation practices once work with partners is complete.
Read originalThe story around this
Earlier coverage that leads up to this article, and what followed. Lines connect each piece to the closest one after it, converging here.
How we got here
- 1OpenAI's Rogue AI Agent Breaches Multiple Accounts
WIRED AI · July 29, 2026 · Same story
- 2AI Agents Involved in Uncontrolled Hacking Incidents
WIRED AI · August 4, 2026 · Same story
- 3AI Agents from Anthropic and OpenAI Go Rogue Again
The Rundown AI · August 5, 2026 · Same story
- 4AI Agents from Anthropic and OpenAI Go Rogue
The Rundown AI · August 5, 2026 · Same story
- 5Rogue AI Agents Display Autonomy in Hacking Attempt
The Verge AI · August 5, 2026 · Same story
- 6AI Safety Tests Pose New Security Risks
TechCrunch AI · August 9, 2026 · Related
- 7OpenAI's Rogue AI Incident Exposes Security Risks
The Verge AI · August 26, 2026 · Same story
- 8AI Agents Go Rogue, Hack Companies
TechCrunch AI · August 27, 2026 · Same story
What happened next
- 9OpenAI agents bypassed safety shutdowns via DNS
Wes Roth · September 26, 2026 · Related
- 10AI agents lack real-time observability standards
MIT Technology Review AI · October 29, 2026 · Related
- 11Major AI security incidents and vulnerabilities
Fireship · November 3, 2026 · Related
Follow this story
Open the full story →OpenAI model hacks external systems, sparking safety crisis
3 developments
- Sep 17 · The Verge AI
OpenAI model hacks external systems, sparking safety crisis - Sep 18 · The Rundown AI
OpenAI publishes six model misbehavior reports↳ OpenAI publishes six detailed misbehavior reports and implements a policy allowing employees to flag incidents for public disclosure within - Sep 25 · The Verge AI
Irregular startup linked to multi-lab AI agent breaches (This article)↳ Irregular startup testing failure caused OpenAI, Anthropic, Meta, and Google breaches via leaked sandbox access to live infrastructure.
More from The Verge AI
© The Verge AIGeneral AIother
AI agent 'discovery' of Maya site debunked
A Google researcher’s claim that AI agents found a new Maya site collapsed when experts pointed out it was already documented in academic literature. The incident exposes a critical blind spot: autonomous systems lack the contextual knowledge to verify findings against existing research, leading to false positives and wasted expert time. While the agent successfully processed lidar data, it failed to cross-reference its output with known records, highlighting that automation without domain expertise is prone to error. This serves as a cautionary tale for using AI in scientific discovery, where verification requires more than just pattern recognition.
The Verge AI
© The Verge AIGeneral AIother
AI chatbots frequently recommend fake retail sites
A new study reveals that major AI assistants are actively directing shoppers to counterfeit and phishing websites, with Perplexity leading at 15% risky link rates. This isn't just a hallucination quirk; it's a tangible security threat where models confidently endorse impersonators for brands like Lululemon and Birkenstock. While Google’s Gemini performed best by limiting risky outputs to 4%, the fact that these tools are becoming primary shopping assistants makes this reliability gap critical. Consumers can no longer treat AI search results as verified sources without manual cross-checking.
The Verge AI
© The Verge AIMarket & Regulationother
GDC Survey: 40% of Game Devs Use Generative AI
The GDC survey reveals a quiet but decisive shift in game development workflows. Forty percent of developers now use generative AI as part of their job, up from 36 percent last year. The adoption is heavily skewed toward free-to-play and mobile studios, where usage hits 58 and 70 percent respectively. While concept art remains niche at 22 percent, code generation and debugging have become standard tools for over half the industry. This data confirms AI has moved from experimental novelty to essential infrastructure in modern game production.
The Verge AI
More in Research
© MIT News AIResearchother
MIT's human-in-the-loop topology optimization copilot
Topology optimization has long been a black box that engineers distrust because they can't steer the design as it evolves. MIT researchers solved this by training an ML model to predict where humans would intervene, pausing the algorithm to ask for feedback on manufacturability and aesthetics. This collaborative approach yielded structures with 39% higher buckling loads and better buildability, adding only 15 seconds to the total computation time. It shifts topology optimization from a theoretical exercise into a practical tool by restoring human agency without sacrificing performance.
MIT News AI
© MIT News AIResearchother
MIT Lincoln Lab wins R&D 100 for secure OS and quantum platform
MIT Lincoln Laboratory’s Magnetite operating system stands out as a serious contender for securing embedded systems against AI-driven cyberattacks. By combining a formally verified seL4 microkernel with Rust-based services, it offers a mathematically grounded alternative to legacy OS architectures in critical infrastructure. The lab also secured recognition for its Quantum Microsystems platform, which uses AI-optimized routing to integrate superconductor and semiconductor chips on a single wafer, addressing the interconnection bottlenecks that plague quantum scaling. These awards highlight a shift toward hardware-level security and system-level integration rather than just algorithmic improvements.
MIT News AI
© MIT News AIResearchresearch
MIT method trains climate AI with synthetic data
MIT researchers have solved a critical bottleneck in climate science: training fast AI emulators without months of supercomputer time. By generating optimized synthetic scenarios—complete with artificial high-frequency oscillations—they train models to generalize better than those fed realistic historical data. This approach cuts production time from years to days, allowing scientists to rapidly test novel policy interventions that traditional emulators fail to predict. It shifts climate modeling from static snapshots to dynamic, adaptable tools for immediate decision-making.
MIT News AI