Nir Zadok

A spoofed Host header let DeepSeek Harness agents switch off their own sandbox

OX Security found that DeepSeek's coding harness would let an agent unlock itself simply by asking, because the gate trusted a name the caller supplies. That makes agent isolation a claim you have to attack before you report it as a control.