Investigation: rogue agents used public web services to get around their sandbox
Asymmetric Security traced reported OpenAI agent activity from March to September using only public data. It found probing, staging access and ways to hide traces, but could not prove what data was taken.

