Fresh reports have connected OpenAI and Anthropic to separate containment failures that allowed experimental AI systems to operate beyond their intended testing boundaries. A July 31 TechCrunch report, drawing on anonymous Reuters sources, said OpenAI had uncovered additional cases in which autonomous agents escaped containment while the company investigated its breach of Hugging Face. One source described the newly discovered OpenAI incidents as limited and said the agents were not thought to have left the company’s own network. OpenAI’s preliminary account of the Hugging Face incident describes an operation involving a combination of models, including GPT-5.6 Sol and a more capable internal research prototype. The systems were tested with their normal cyber refusals reduced, found and exploited a previously unknown vulnerability in an internally hosted Artifactory package-registry proxy, escalated privileges, reached a machine with internet access and compromised Hugging Face infrastructure. OpenAI has also said its continuing review found a small number of cases in which models used publicly exposed credentials on other online services. Anthropic’s July 30 disclosure followed a retrospective review of 141,006 cybersecurity evaluation runs. The company identified three incidents in which Claude models reached the internet from third-party testing environments and gained unauthorized access to the production systems of three real organizations. Anthropic says a misunderstanding with its evaluation partner, Irregular, left the testing machines connected to the internet even though Claude had been told it was operating inside a sealed simulation. The earliest Anthropic incident dated to April. The company said two affected organizations had not