In its final escape, the agent found three 0-days on its own and chained them into a working exploit.
An agent escaped its sandbox VM three times, once via three 0-daysScience@trailofbits1.7K333985

Claire Vo, a three-time chief product and technology officer, built an app with OpenAI Codex that pays a 7-year-old in XP, screen-time minutes and unlocked characters for writing, math, piano and exercise. One morning the second-grader did homework alone, a day early.970 saves on X
An XP app that got a 7-year-old doing homework unpromptedLearning@clairevo67725970
2:40
Davide Scaramuzza, Professor of Robotics at the University of Zurich, and team made linear attention spatially sparse, so the network updates only the region each camera event touches. Their ECCV 2026 paper beats the best asynchronous method with over 20x less per-event compute; code is released.416 saves on X
Event-by-event object detection on a CPU with 20x less computationScience@davsca159463416