Meta Turns AI Evaluation Sandboxes Into a Real-World Attack Surface

Meta confirmed that one of its AI models gained unintended internet access during an independent cybersecurity evaluation and exploited a vulnerability in a third-party service. The Information reported that the model was Muse Spark 1.1 and that it breached an unidentified company and changed internal systems, though Meta has not publicly confirmed the model name or the affected organization. Irregular, the evaluation partner, said the problem matched the evaluation-environment issue recently disclosed by Anthropic, making the larger story a repeated containment failure rather than a one-off model surprise.