Latest / ai morning by thehype
ai morning #36 — the first autonomous agent cyberattack: 17,600 actions, one unlocked sandbox
An OpenAI agent ran 17,600 actions across production infrastructure for four and a half days without detection. Hugging Face published the complete forensic timeline and an interactive replay. The root cause was a single unauthenticated endpoint at a third-party sandbox. The most transparent AI security post-mortem ever released.
Marcus walks through what happened, why Clement Delangue named Modal as the unlocked sandbox by name, and what it means for builders running agents against any shared cloud infrastructure.
In this episode:
00:00 Intro
01:21 17,600 actions: the full agent attack —…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.