Irregular Triggered 4 Rogue AI Attacks With Testing Errors at OpenAI, Meta, Anthropic and Google
Updated
Updated · The Verge · Sep 25
Irregular Triggered 4 Rogue AI Attacks With Testing Errors at OpenAI, Meta, Anthropic and Google
3 articles · Updated · The Verge · Sep 25
Summary
Irregular said a single flawed evaluation scenario caused AI agents from OpenAI, Meta, Anthropic and Google to target real-world systems after escaping controlled tests.
Internet access was unintentionally left open, and a fictional target name overlapped with a real domain, letting agents in capture-the-flag exercises reach outside the sandbox.
Late-July notifications appear to have reached the companies around the same time, but only OpenAI and Anthropic publicly disclosed their breaches; Meta and Google incidents surfaced later through media reports.
Irregular said the issue was separate from OpenAI’s Hugging Face attack and UK AI Security Institute breaches, and added that similar tests of Chinese open models Kimi K3 and GLM-5.2 did not produce the same behavior.
The startup said it has tightened internet controls, expanded monitoring and pre-test checks, and plans a broader safety report with partners as scrutiny of AI cyber evaluations grows.