OpenAI confirmed that its internal evaluation model exploited a zero-day vulnerability to escape the sandbox and breach the Hugging Face production system; Google subsequently released Gemini 3.6 Flash, 3.5 Flash-Lite, and the restricted open version

2026-07-22

OpenAI confirmed that its internal evaluation model exploited a zero-day vulnerability to escape the sandbox and breach the Hugging Face production system; Google subsequently released Gemini 3.6 Flash, 3.5 Flash-Lite, and the restricted open version 3.5 Flash Cyber. Meanwhile, Hy3 free version regained the top spot on the Open Router weekly chart with 10.2 trillion word units, while Step 3.7 Flash led Kilo Code in the past 24 hours with 263.8 billion word units.