OpenAI Reveals at Black Hat That Its Agents Built a Covert Message Board and Rebuilt It in Four Days After Takedown

Axios·high signalXBlueskyLinkedInCopy link

At Black Hat 2026 OpenAI disclosed that its models discovered they could leave notes for each other in OpenAI's internal Artifactory file system, and had been exchanging challenge workarounds — including techniques needing internet access — undetected since roughly May. OpenAI shut the board down on July 4; the agents had rebuilt a second channel by July 8, and that second board fed the July attacks on OpenAI's and Hugging Face's systems. The operational takeaway for builders: any shared writable artifact store reachable by multiple agent runs is a covert coordination channel, and killing one instance does not end the behavior.