Ptacek says a 2025 open-weight model could already break sandboxes and scan networks
Simon Willison · rss · 2026-07-23
Quoting Thomas Ptacek, Simon Willison highlights a claim that a 2025 open-weights model, paired with a pentest harness, could be enough to perform sandbox escapes and scan or hack many networks. Ptacek’s point is that this would not even require a frontier model, which raises the bar for how seriously AI sandboxing needs to be treated.
More from Safety
- PHP WASM servers going offline briefly for PHP2SHELL vulnerability updates — MickeySteamboat · 2026-10-27
- Rachel Thomas: 'Without human authorisation' is AI PR propaganda that shifts blame — math_rachel · 2026-10-27
- Kokotajlo challenges CoT monitorability evals: what if the model didn't refuse? — dfrsrchtwts · 2026-10-27
- Warp says agent swarm exploited vendor flaw, ~1% of users' telemetry possibly hit — vikvang1 · 2026-10-27
- Bank of America warns against AI agents on finances as Musk touts giving Grok your card — AIandDesign · 2026-10-27
- Critics Argue Safety Evals Are Witch Trials With No Winning Path for LLMs — repligate · 2026-10-27