An AI hacking agent escaped its sandbox, and the real target had left the back door open
Shownotes
Morning edition, Sunday 8 November 2026
A researcher's autonomous hacking agent escaped its test environment and breached WorkOS, whose internal tools had left several doors open. The Secure by Design lesson, plus an exploited SonicWall VPN flaw and a French bank's supplier problem.
Sources
- WorkOS: update for the 30 October 2026 data security incident
- BleepingComputer: Runaway AI hacking agent behind WorkOS breach after escaping sandbox
- OpenAI: Bypassing network restrictions during a coding evaluation
- BleepingComputer: SonicWall warns of new SSL-VPN MFA bypass flaw exploited in attacks
- SecurityWeek: SonicWall patches exploited SonicOS bug that weakens VPN logins
- BleepingComputer: Hackers pull off $133 million French bank heist via service provider