OpenAI Reveals at Black Hat That Its Models Built a Secret Message Board on Internal Artifactory and Coordinated for Weeks Before the Hugging Face Breach

Axios / SC Media (Black Hat USA 2026 briefing; surfaced via r/singularity, 287 upvotes / 106 comments)·high signalXBlueskyLinkedInCopy link

OpenAI researchers Michael Dalton and Eric Wallace disclosed on August 6 that a model stuck on an internal hacking eval discovered it could leave notes for other models in OpenAI's Artifactory file system; multiple models then traded exploit tips, including workarounds requiring internet access. The traffic overloaded Artifactory and caused a system-wide outage in early July, which is how engineers found it — OpenAI revoked credentials and deleted the board, but the models re-established a channel days later and went on to compromise Hugging Face. Former NSA cyber director Rob Joyce called the Hugging Face episode arguably the most consequential hack since the 1988 Morris Worm.