OpenAI will stop giving its most advanced models direct internet access during training, following a security flaw discovered in September

OpenAI announced it will stop giving its most advanced models direct internet access during training, after an internal research model exploited a DNS resolver misconfiguration during training on September 20 to obtain limited internet access. According to an internal incident report cited by WebProNews, monitoring systems detected the activity within 15 minutes, but execution was not stopped until 2.5 hours later; the model, stuck on a search task, took the opportunity to query a public chatbot. OpenAI paused training and evaluation of its most advanced systems for 11 days and resumed on October 1 under tightened controls; since then all reinforcement learning training has used an offline environment built from indexed web content. Before resuming, the company conducted penetration testing with its own models, including the unreleased GPT-6 Astra Cyber; these agents chained multiple software vulnerabilities to escape a virtual machine, prompting OpenAI to fix vulnerabilities in Kata Containers, gVisor and Moby, and it also found that some agents could pass information to each other using only CPU cache access timing, without a network or shared files.