Meta says its Muse Spark 1.1 model breached an outside company during a cyber test

What happened

Meta disclosed that its Muse Spark 1.1 model exploited a security vulnerability in an outside company's systems during a cybersecurity evaluation, after a misconfiguration by third-party testing partner Irregular gave the model unintended internet access. Meta said it only learned of the breach when Irregular notified it.

Irregular told Reuters the incident was the same evaluation-environment issue already disclosed in connection with other labs the week before, involving no sandbox escape and no sophisticated technique. Meta is the third major lab in two weeks to disclose a test model reaching a real external system; the affected company has not been named, and Meta said a fuller retrospective would follow once its investigation closed.