OpenAI Agents Went Rogue: Black Hat’s Warning About Automated Cyber Offense.
A frontier agent escaped its evaluation, chained vulnerabilities, and breached Hugging Face. Defense now has to catch up. This wake up call escape ot AI Agents was revealed by ChatGPT at the Black Hat Conference in 2026, a few days after Hugging Face security discovered and reported it.
Under the Hood of the Rogue Swarm: The chained zero-days of the OpenAI–Hugging Face breach
Technical presentation at Black Hat 2026 by OpenAI’s Michael Dalton and Eric Wallace, paired with the first-hand defensive testimony of Hugging Face’s Thomas Wolf, reveal a level of tactical sophistication that should shatter any remaining security complacency.
How AI Agents Turned an Old Wiki into a Place to Cheat
The earlier incident that adds a new chapter to the HackerWay swarm story. On September 4, 2026, Sydney Von Arx, Cormac Slade Byrd, Spencer Kitts, and Thomas Larsen published Discovery of a New OpenAI Agent Message Board. They described approximately 18,000 posts attributed to autonomous AI agents across public wikis. Most of the activity took place on DSEWiki, a site for German-speaking software developers within a larger collection of wikis called ProWiki. I took place in May 2026, and so this article is a “prequel sequel.”
