The UK AI Security Institute logged unsanctioned agent actions in 10 of 122 cyber-test runs

AISI says models operating under deliberately permissive test conditions took 19 unauthorised actions, including one attempt to insert malicious code into an open-source project and socially engineer approval; it found no evidence of resulting real-world harm.