Who signed off on that AI agent? Nobody? Thought so.

If you were in any doubt that AI agents are capable of complex autonomous work, that skepticism should have faded this summer.

In July, news emerged that an autonomous swarm of OpenAI agents running in a sandbox broke out of it, of their own accord.

Tasked with solving some challenges on an internal security benchmark, they worked out how to communicate with each other using the JFrog Artifactory package manager.

The software then realized that they could use vulnerabilities in that software to gain internet access.

Once they were out in the wild, they went into full goblin mode, finding exposed Hugging Face credentials and using them to get code execution access on several of the AI model's servers.

Apparently OpenAI's agents have been busier still.

While everyone else was on vacation this summer, they were also commandeering a German website and using it as a messaging board.

Don't get us wrong; these agents weren't evil.

They were just being the kind of employee you'd generally want: a self-starter with initiative.

They were using all means at their disposal to accomplish the task they've been given.

They just didn't know when to stop.

OpenAI has since called the episode a "warning shot" for the industry, highlighting that governance is now a priority for anyone using agentic AI.

These test agents were running internally and weren't supposed to have any safeguards.

But the average company will want to keep its agents on a leash.