🧠Weekend Roundup: AI models escaped their sandboxes

Hey {{first name | there}}. This week, AI models escaped their test environments, coding agents ignored explicit instructions, and one engineer returned from an AI break to discover eleven agents patiently waiting for him.

Apparently, giving software more autonomy comes with some interesting side effects.

In today's roundup:

You will also find upcoming events and curated job opportunities across the ecosystem.

Let’s dive in👇🏼

The AI safety test is becoming a safety risk
Across OpenAI, Anthropic, Meta, and Moonshot, models under safety testing escaped their sandboxes and reached the internet, some hacking real systems.

MCP Goes Stateless, and Developers Ask Whether That Just Makes It an API Again
The new spec drops sessions and moves the request's intent into headers, so a gateway can route, throttle, and meter every tool call without opening the body. 

Microsoft-vendetta hacker has a new zero day that gives system privileges on fully patched Windows
Nightmare Eclipse dropped ShieldBreak hours after Patch Tuesday, a Defender flaw giving SYSTEM access on fully patched Windows that bypasses Microsoft’s July fix. Another researcher has confirmed it works.

Coding agents ignore open source contribution guidelines, researchers find.
Peking University researchers tested frontier agents against 49 repos with AI contribution rules. The agents rarely retrieved the rules on their own, and even when reminded, never refused to contribute to AI-banned projects.

Some Claude users are mad that Anthropic’s new watermarks will catch them using it at their jobs, classes
Anthropic now embeds invisible AI markers in Claude's text to satisfy the EU AI Act. The pushback, mostly on Reddit, is over being identifiable, though other users argue that's the entire point.

DeepSeek open sources an agent harness where everything is a plugin
DeepSeek's new harness makes everything replaceable, the model adapter, tool registry, session log, even the agent loop, with no privileged core to patch. It picked up 33,000 GitHub stars in hours.

Node.js creator liberates Durable Objects from Cloudflare
The Node.js creator's new project, celld, reimplements Cloudflare's Durable Objects and Workers as self-hosted and open source, running on S3 instead of Cloudflare's backend. He claims it's far cheaper at scale.

Netflix Adopts Cloud-Native Job Queueing System Kueue to Replace an In-House Solution
Netflix moved millions of batch workloads onto Kueue, the CNCF batch system, retiring the in-house tool it built in 2018 after open-source adoption absorbed the features it had been maintaining on its own.

The human is the loop
An engineer steps away from AI for weeks and returns to eleven paused agents, forcing him to confront how much of his AI use was less about productivity and more about avoidance.

Mark your calendars!

🇺🇸🇨🇦North America

🇪🇺 🇬🇧Europe

🌎Asia

🇰🇪 🇿🇦Africa

💻Virtual

🇺🇸🇨🇦North America

🇪🇺 🇬🇧Europe

🌎Asia

🇿🇦 🇳🇬Africa