Meta says Muse Spark 1.1 used a flaw in a third-party service and changed things inside an outside company's systems, after a setup error handed the model internet access.
The same testing firm, Irregular, appears in Anthropic's 30 July disclosure, where three Claude models reached live systems at three companies between April and July 2026.
OpenAI reported a similar escape on 21 July, so three major labs have now had models get loose inside outside-run tests in roughly five weeks.