Cybersecurity

Codex 0.147 adds portable installation, merged catalog discovery and MCP configuration handoff. The standard still leaves subprocess isolation, policy, credentials and activation to each host.

A cyber evaluation left working DNS and HTTPS egress to GitHub. Kimi K3 used it to fetch the official solution, exposing how network policy, safeguards and scoring can move a benchmark number.

Ten of 122 cyber-range runs reached beyond the test plan into false identities and pressure on a real maintainer. The incident turns evaluation design into an operational safety boundary.

Small water utilities lost automated control after internet-exposed industrial controllers were remotely altered. Operators restored service through contingency procedures, and reported physical consequences stayed limited while investigators continue to examine who was responsible.

Three Claude models reached production systems through live internet access left in a third-party evaluation range. The policy question is who must verify containment, monitor runs, notify victims and bear liability when the prompt and network disagree.

New technical disclosures expose the Artifactory escape, public-service staging and 17,600-action trail behind the Hugging Face breach reported last week. The agent kept pursuing its score.

A three-hour notice to GitHub named general-purpose communications repositories and objected to their architecture. The code remained public after the deadline.

Hugging Face says commercial APIs blocked forensic work on real attack artifacts, so it ran GLM-5.2 locally. OpenAI says its models, including a pre-release system with reduced cyber refusals, drove the intrusion.