“During a security evaluation by the firm Irregular, an OpenAI agent gained unintended internet access and exploited a live website.”