Aug 5, 2026 8:15 PM

OpenAI Didn’t Notice Its AI Agents Using a Message Board to Plan Their Hacking Spree

At the Black Hat security conference, the AI giant revealed new details about how its agents went rogue, hacked several other companies—and did it all right under the company’s nose.

PHOTO-ILLUSTRATION: WIRED STAFF; GETTY IMAGES

In a talk that was a last-minute addition to the Black Hat security conference in Las Vegas on Wednesday, employees from OpenAI presented new details about a recent, high-profile incident of rogue AI hacking that has created a maelstrom within the AI and cybersecurity industries.

You’ve read your last free article.

The intersection of technology, power, and culture. Start your free trial and get access to 5 all-new premium newsletters—cancel anytime.

START FREE TRIAL

Already a subscriber? Sign In

The intersection of technology, power, and culture. Get WIRED today. START FREE TRIAL

Comments (3)

Join the WIRED community to add comments.

PCUNIX
BO_LAURENT
GRANUL
ELS23
Yes, this seems more like marketing that reality. I'm sure hacking other businesses and being able to blame AI would appeal to a lot of corporate executives.

In your inbox: This is not your average politics newsletter
WiFi-8 is coming—here’s everything you need to know
Big Story: Young runners are becoming freakishly fast
The new reality of urban surveillance
Take our survey: Do you work in tech? We want to hear from you

Lily Hay Newman is a senior writer at WIRED focused on information security, digital privacy, and hacking. She previously worked as a technology reporter at Slate, and was the staff writer for Future Tense, a publication and partnership between Slate, the New America Foundation, and Arizona State University. Her work ... Read More

Senior Writer

Topicsartificial intelligence cybersecurity hacking vulnerabilities security hacks OpenAI Anthropic black hat

OpenAI’s Rogue AI Agent Hacked More Than Just Hugging Face

In a new disclosure, OpenAI says its agent used exposed logins to gain access to at least four “publicly available services” in its unhinged quest to solve a test.

Dell Cameron

OpenAI’s Hacking Debacle Comes Down to Human Error

If the generative AI giant had followed well-known security best practices, it’s likely that its AI agent would never have escaped to the open internet and hacked multiple companies.

Lily Hay Newman

OpenAI Models Escaped Containment and Hacked Hugging Face

The cybersecurity-focused models, including GPT-5.6 Sol, broke out of a testing sandbox, exploited a zero-day, and gained access to the open internet to pull off the attack.

Lily Hay Newman

The Most Dangerous AI Hacking Techniques Still Have Humans in the Loop

Security researcher James Kettle tried to push the limit of AI’s hacking abilities—and discovered how effective it can be when combined with human expertise.

Lily Hay Newman

The OpenAI Models That Hacked Hugging Face Were ‘Active on the Internet’ for Days

Plus: Russian hackers are trying to steal US nuclear scientists’ emails, the State Department bans known scammers from entering the United States, and more.

Lily Hay Newman

OpenAI’s Browser Could Be Hijacked to Spam Your WhatsApp Contacts

Researchers at security firm Zenity found more than a dozen flaws in AI browsers—and managed to get OpenAI’s Atlas to make an unauthorized Amazon purchase.

Matt Burgess

The OpenAI and Anthropic AI Hacking Sprees Are a Messy New Legal Frontier

Both major AI labs’ models broke containment, escaped onto the internet, and hacked other companies. If a human had done that, the law would likely be against them. But a bot?

Lily Hay Newman

A Sneaky Hacking Tool Targeting AI Infrastructure Is Lurking in Victims’ Blind Spots

A new type of malware can worm deep into AI coding systems to steal data and logins—and can flip a “death switch” to destroy files and keep out real users.

Lily Hay Newman

Anthropic Says Claude Hacked Into 3 Organizations During Cybersecurity Tests

In a review triggered by OpenAI’s Hugging Face incident, Anthropic discovered three of its AI models had breached real-world organizations during third-party evaluations.

Louise Matsakis

Your Period Tracker Is (Probably) Spying on You

Plus: Russian cyberspies turn to infrastructure hacking, DHS repeatedly fails to realize it’d been hacked, a breach exposes an AI music generator’s scraping ways, and more.

Andy Greenberg

A Security Pro Hacked North Korean Hackers. He Found They’d Breached Hundreds of Networks Worldwide

For nearly two years, researcher Vangelis Stykas has maintained access to North Korean hackers’ servers. His work shows they pulled off intrusions in a shocking number of systems across the globe.

Matt Burgess

Prompt Injection Attacks Are Thwarting AI Hacking Agents

“Context bombing” tricks malicious AI agents into shutting down before they can do harm.

Dan Goodin, Ars Technica

Comments (3)

Comments (3)

You Might Also Like

Don't Just Keep Up. Get Ahead