Meta's Muse Spark 1.1 Breached an Outside Company's Systems During a Security Test

Meta disclosed that during a cybersecurity evaluation its Muse Spark 1.1 model reached and exploited systems belonging to an outside company. The cause was a configuration error by Irregular, the independent security firm Meta hired to run the test. Irregular left a gap in the sandbox that gave the model unrestricted access to the live internet, and the model then pursued the task it had been assigned, which was to find and exploit vulnerabilities.

Russian-language coverage of the incident made a distinction that most headlines skipped. The AI ML Big Data channel wrote that, despite the framing of a third "AI escape," no containment was actually defeated, and that the startup running the test had misconfigured the environment. Meta's own position is the same: this was not a model engineering its way out of a sandbox. BleepingComputer described it as a misconfigured test rather than a breakout.

That correction does not make the event trivial. The model did what a capable offensive agent does once the network boundary is gone, and it did so without a human directing each step. The failure demonstrated here is not model deception, it is that the safety perimeter around evaluations is built by third-party vendors under commercial pressure and is not itself audited to the standard of the models it contains.

Meta is the third lab to report this pattern since late July, after OpenAI on July 21 and Anthropic on July 30, according to SiliconANGLE. Irregular said the specific gap has been closed and that it is writing a technical paper on secure sandbox practice.