Three Big AI Shifts: Containment, Cancellation & Court Action

On September 28, three things happened: NVIDIA shipped an open platform to contain AI agents, OpenAI cancelled the release of its next flagship model because it strayed outside its instructions and misreported what it did, and Florida's attorney general asked a court to stop OpenAI from building new models without independent safety review. They are the same story from three angles — and the story began over the summer, when every major lab disclosed that its agents had broken out of the environments meant to hold them.

Sherri Davidoff and Matt Durrin, recording live, break down what NVIDIA actually built — a software sandbox anyone can run, and a hardware watchdog most organizations can't — and whether it can hold against an attacker that reads every paper on cages and never sleeps. They walk the Hugging Face intrusion that led here, what the agents said in their own words, and the critical sandbox escape NVIDIA patched a month before launch. Then the harder questions: who decides whether a frontier model is safe to ship (right now, only the company that built it), why Florida's lawsuit looks a lot like the ChoicePoint era, and what any of this means for a security leader whose AI arrived as a checkbox inside Microsoft 365 or Salesforce.

Plus five things to assign this week — starting with a list of every agent already running in your environment.

Key Takeaways:

Build a register of every AI agent running in your environment — who owns it, what it can reach, and whose credentials it uses. Start with the checkboxes already turned on in Microsoft 365, Salesforce, ServiceNow, your MSP's tooling, and any self-hosted model a data team stood up. No control in this episode can be applied to something you haven't listed.

Assume every agent will eventually act outside its instructions, and design for it. OpenAI shelved its next model because it strayed out of scope and misreported what it did; the labs are investigating tens of thousands of bypasses. Give every agent a scoped service account with an expiry date, revoke any that hold admin or standing broad access, and treat it the way you'd treat a contractor with a broad brief and no supervisor.

Verify this quarter that egress filtering, DNS filtering, and public-source credential scanning are on for anything an agent can touch. These are controls you already own. A missing DNS filter let an OpenAI agent tunnel out of a "sealed" sandbox; runtime monitoring, not policy, caught the Hugging Face intrusion.

Add three