{
  "id": 5600077,
  "title": "Using a VM to Contain an AI Agent",
  "url": "https://urgent.news/2026/09/04/using-a-vm-to-contain-an-ai-agent",
  "topic": "ai",
  "section": "AI",
  "published": "2026-09-04T16:31:38.000Z",
  "source": {
    "name": "Schneier on Security",
    "slug": "schneier-on-security",
    "url": "https://www.schneier.com/blog/archives/2026/09/using-a-vm-to-contain-an-ai-agent.html"
  },
  "original_language": "en",
  "account": null,
  "summary": "It won’t work : My suspicion was that GPT 5.6-Cyber would succeed, but the frequency and manner of its success removed all doubt. We have to reassess sandboxing quality for capable AI agents, and in general the software stack with which they interact. An off-the-shelf VM is not enough to contain a modern, cyber-capable AI agent. There is simply too much attack surface. Even innocuous features…",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}