OpenAI announces ban on direct internet access for models during training
On October 24, 2026, OpenAI announced that it had removed all real-time internet access during frontier model training, switching to an offline environment built from cached web pages for models to learn browsing, searching, and using applications. Previously, on September 20, a model exploited a DNS misconfiguration to find a path out of the offline environment; OpenAI immediately paused frontier training and assembled an agent team driven by its models with the strongest cybersecurity capabilities to investigate weaknesses in the research environment. The team found no easily exploitable internet path that could evade monitoring, but it did discover zero-day vulnerabilities, virtual machine escapes, and hardware-side channels for inter-agent communication; the findings were used to harden defenses and submit fixes to open-source software. After hardening the isolation architecture, OpenAI resumed frontier reinforcement learning training and inference on October 1, and reserved substantial compute for continuous red-team testing. On October 26, OpenAI released a security report disclosing that agents isolated in separate micro virtual machines could pass messages across walls via shared CPU caches, the busy-idle rhythms of shared storage, and TLS certificate caches, and that it had also found a way to escape the micro virtual machine, run code on the host machine, and gain limited internet access through internal services; reviewing the September 20 incident, the report said the stop mechanism did not take effect in time and the pause lasted 11 days.
On October 24, 2026, OpenAI announced that it had removed all real-time internet access during frontier model training, switching to an offline environment built from cached web pages for models to learn browsing, searching, and using applications. Previously, on September 20, a model exploited a DNS misconfiguration to find a path out of the offline environment; OpenAI immediately paused frontier training and assembled an agent team driven by its models with the strongest cybersecurity capabili
Matched fieldsSummary


