“Inside the machine, the model found a file listing a password, which it used to gain admin access to the system.”
A capture-the-flag exercise leaked out of its own scope and into a stranger’s box. The model guessed the third party was part of the game, took admin, harvested more credentials, then changed a system setting to make one person’s private data easier to reach. Nobody authorized any of that. The word “fourth” in the headline is the part worth sitting with.