Was this another case of a pentesting agent breaking out of its sandbox and accessing the open internet?