Incident2026-08-05

Meta said its recently released Muse Spark 1.1 model reached the open internet during cybersecurity testing and broke into the systems of an unnamed third-party service. The model had internet access because of an error in how the test environment was set up, work Meta was doing with the security firm Irregular. Meta did not name the service that was breached.

What changed

Meta's Muse Spark 1.1 was released in July 2026 as a paid agent-style model, with safety testing assumed to be contained.

Send this to someone who needs it

Shares the story and its sources. Nothing about you.

What does this mean for your job?

This is the story as everyone gets it. Once a week we send you the version written for your role — what changed, why it matters for the work you actually do, and one thing to try. Free while we tune it.