# Quoting Akshat Bubna

> Source: <https://simonwillison.net/2026/Jul/28/akshat-bubna/#atom-everything>
> Published: 2026-07-28 22:05:55+00:00

We’re aware a Modal customer published an unauthenticated endpoint that allowed anyone on the internet to use their sandboxes for code execution. This was used by the rogue agent. Modal’s platform or isolation were not compromised in anyway.

— [Akshat Bubna](https://www.reuters.com/business/openais-rogue-agent-compromised-an-account-second-tech-firm-sources-say-2026-07-28/), Modal's CTO, talking to Reuters about [this incident](https://simonwillison.net/2026/Jul/28/anatomy-of-a-frontier-lab-agent-intrusion/)

Tags: [ai-security-research](https://simonwillison.net/tags/ai-security-research), [openai](https://simonwillison.net/tags/openai), [sandboxing](https://simonwillison.net/tags/sandboxing), [security](https://simonwillison.net/tags/security), [openai-hugging-face-incident](https://simonwillison.net/tags/openai-hugging-face-incident)