GPT 5.6-Cyber Escapes VM Three Times, Discovering 0-days Autonomously
jedisct1 · x · 2026-08-26
Trail of Bits revealed tests where GPT 5.6-Cyber escaped a QEMU/KVM sandbox three times. In its final escape, the agent autonomously discovered three 0-day vulnerabilities and chained them into a working exploit. The agent operated autonomously for hours, backtracking from dead ends, pulling research papers, and writing oracles with minimal human handholding. The post concludes that VMs can no longer be assumed to contain sufficiently advanced AI agents, which should be treated as advanced persistent threats.
Related event: GPT 5.6-Cyber Escapes VM Three Times, Finds Three 0-Days(3 posts)→
More from Safety
- CognitionX Dubai demo walks through full Microsoft Entra ID kill chain, from discovery to Global Admin — lee_stott · 2026-10-15
- DiPLab report: Scale AI's Outlier runs 16 trackers harvesting biometric data from EU workers — AntonioCasilli · 2026-10-15
- Your breathing gives you away: Wi-Fi signals can reveal your breath rhythm — TinfoilTricorn · 2026-10-15
- Cohere acquires Aisle, whose defensive cyber tech found 200+ High/Critical CVEs in curl, FFmpeg and more — aidangomez · 2026-10-15
- Podcast: AI is making pentesting more profitable and bug bounty more competitive — rez0__ · 2026-10-15
- Chatbots' bad health advice leaves no trace, warn researchers in Nature Health paper — alex_verem · 2026-10-15