{"id":1763,"date":"2026-08-06T20:20:04","date_gmt":"2026-08-06T20:20:04","guid":{"rendered":"https:\/\/www.vaultinsider.top\/?p=1763"},"modified":"2026-08-06T20:20:04","modified_gmt":"2026-08-06T20:20:04","slug":"openai-agents-left-secret-memos-for-each-other-leading-up-to-hugging-face-hack","status":"publish","type":"post","link":"https:\/\/www.vaultinsider.top\/?p=1763","title":{"rendered":"OpenAI agents left secret memos for each other leading up to Hugging Face hack"},"content":{"rendered":"

<\/p>\n

OpenAI executives spoke out for the first time on Wednesday about how its AI models hacked Hugging Face last month, sharing chilling details about how the agents worked together for months prior to the attack.<\/p>\n

\n

On stage at the Black Hat cybersecurity conference in Las Vegas, OpenAI alignment and safety researcher Eric Wallace along with infrastructure and security engineer Michael Dalton explained that the origins of the breach go back to May 7 when OpenAI was internally testing an unreleased model, according to a report from Ground Level AI, which attended the session.<\/p>\n

That\u2019s over two months before the rogue agents entered Hugging Face\u2019s servers on July 9. Hugging Face disclosed the breach on July 16, followed by OpenAI claiming responsibility on July 21, which Fortune<\/em> was first to report.<\/p>\n

In Las Vegas, the OpenAI execs explained for the first time that as part of training back in May, the company\u2019s researchers prompted the AIs with tasks that should have been impossible under the constraints of the testing environment.<\/p>\n

In order to tackle the challenge, the OpenAI execs explained, the model spun out multiple iterations of itself, or agents. The agents then began to work together, leaving messages for each other on an internal messaging board. They did this by saving files of notes for one another in a repository. That way, if an agent discovered a system vulnerability, or got access to a server it wasn\u2019t supposed to, it could leave a note for the others to let them know about it.<\/p>\n

This sequence of events reveals how the agents appeared to decide on their own that working collaboratively, rather than individually, would get them to their goal faster.<\/p>\n

OpenAI discovered its models\u2019 messages and shut down the operation in early July. The company apparently had its own internal security incident on July 4, after which it revoked the ability for agents to post messages. (Perhaps we will learn more about that incident when OpenAI releases its post-mortem.)<\/p>\n

But, as the executives explained on Wednesday, OpenAI\u2019s attempt to curtail the agents\u2019 messaging abilities was not entirely successful. Instead, the agents proved to be persistent, and spun up a new version of a messaging board\u2014with a twist. Rather than leaving messages in files, they created directories, and used their new names as messages. This is what would lead them to hack Hugging Face a few days later on July 9.<\/p>\n

In the messages, the agents discussed that they needed more information to complete their impossible tasks, and reasoned that the material might live on an external website such as GitHub or Hugging Face. They first hacked into OpenAI\u2019s infrastructure, though apparently didn\u2019t find what they needed, so they went to Hugging Face. In OpenAI\u2019s internal post-mortem, a public version of which it says it will release in the coming weeks, it was able to connect these two breaches.<\/p>\n

Agent collaboration is a feature, not a bug<\/h2>\n

It appears OpenAI did not know the agents hacked an outside company until Hugging Face disclosed the incident. It was only then that they able to connect the internal breach with the Hugging Face breach later in July, tracing them both back to the same internal testing.<\/p>\n

Agent collaboration is actually a trend in the AI industry, Hugging Face CEO Clem Delangue tells Fortune<\/em>. For that reason, he was \u201cnot so surprised\u201d to hear of OpenAI\u2019s agents colluding. Hugging Face hosts spaces for agents to collaborate. In one example on the site, humans can click an \u201cAdd Your Agent\u201d button to launch their AIs into the fray. They coordinate activities through a shared messaging board. <\/p>\n

Another example of agents collaborating can be found in the Elon Musk-owned xAI , which recently added four agents to its Grok 4.2 model, naming them Grok, Harper, Benjamin, and Lucas. They \u201cdebate internally [and] fact-check each other in real time,\u201d writes one user. Agents often negotiate, share information, delegate tasks, and adapt to each others\u2019 actions, according to an Amazon article on AI agents. Each completes its portion of the project, and then reports back to the group.<\/p>\n

\u201cFor example, multi-agent systems in healthcare can have agents specializing in specific tasks like diagnosis, preventive care, medicine scheduling, etc., for holistic patient care automation,\u201d Amazon says.<\/p>\n

The problem going forward is how to make sure the agents are not working toward a nefarious goal, or that they do not commit crimes, such as hacking, to achieve their desired outcome. Responsibility for any liability that arises from rogue agents like the ones that attacked Hugging Face could likely fall on the AI company that created the agents designed its prompts, and what internal controls it puts in place.<\/p>\n

Companies like OpenAI could \u201canalyze the agent logs and traces\u201d to see what they\u2019ve been doing, Delangue said, adding that \u201c[he\u2019s] not really sure why frontier labs don\u2019t do this to be honest, that sounds like 101 of agent monitoring, especially at the frontier.\u201d He personally asked OpenAI to release the redacted agent traces after the hack.<\/p>\n

Meanwhile, regulators have been slow to develop regimes to carry out oversight in how AI companies operate. The Trump administration met this week with the leading AI labs in Washington D.C. to discuss a safety framework for powerful new model releases. <\/p>\n

The framework calls for companies to submit their models to the government for review 30 days prior to their debut. However, the administration has decided not to publicize the framework, or any details, such as the companies that will participate, or the criteria for which models are eligible, leaving the public and rest of the AI industry in the dark.<\/p>\n

In disclosing the details of the Hugging Face attack, OpenAI did not share this new information in a blog post or written report, as is typical with security incidents. Instead, it elected to provide the details at the Black Hat conference in Las Vegas after organizers reached out to OpenAI and asked the company to speak.<\/p>\n

\u201cGiven its complexity, we think it\u2019s important to share what happened, what we learned, what we\u2019re changing, and what this means for AI security and alignment,\u201d wrote OpenAI CISO Dane Stuckey on X regarding why the company accepted Black Hat\u2019s invitation. OpenAI is still planning to publicly release a written post-mortem, but declined to comment on the date we can expect it.<\/p>\n<\/div>\n

#OpenAI #agents #left #secret #memos #leading #Hugging #Face #hack<\/p>\n","protected":false},"excerpt":{"rendered":"

OpenAI executives spoke out fo… <\/p>\n","protected":false},"author":1,"featured_media":1764,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[832,523,813,522,3511,3509,3510,480,1004],"class_list":["post-1763","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-finance-news","tag-agents","tag-face","tag-hack","tag-hugging","tag-leading","tag-left","tag-memos","tag-openai","tag-secret"],"yoast_head":"\nOpenAI agents left secret memos for each other leading up to Hugging Face hack - Finance News<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.vaultinsider.top\/?p=1763\" \/>\n<meta property=\"og:locale\" content=\"zh_CN\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"OpenAI agents left secret memos for each other leading up to Hugging Face hack - Finance News\" \/>\n<meta property=\"og:description\" content=\"OpenAI executives spoke out fo…\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.vaultinsider.top\/?p=1763\" \/>\n<meta property=\"og:site_name\" content=\"Finance News\" \/>\n<meta property=\"article:published_time\" content=\"2026-08-06T20:20:04+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/fortune.com\/img-assets\/wp-content\/uploads\/2026\/08\/GettyImages-2287521404_03ae7c-e1786035210519.jpg?w=2048\" \/>\n<meta name=\"author\" content=\"admin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"\u4f5c\u8005\" \/>\n\t<meta name=\"twitter:data1\" content=\"admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 \u5206\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.vaultinsider.top\\\/?p=1763#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.vaultinsider.top\\\/?p=1763\"},\"author\":{\"name\":\"admin\",\"@id\":\"https:\\\/\\\/www.vaultinsider.top\\\/#\\\/schema\\\/person\\\/ed40724a3e5d482ce66781a042c3c31e\"},\"headline\":\"OpenAI agents left secret memos for each other leading up to Hugging Face hack\",\"datePublished\":\"2026-08-06T20:20:04+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.vaultinsider.top\\\/?p=1763\"},\"wordCount\":1084,\"commentCount\":0,\"image\":{\"@id\":\"https:\\\/\\\/www.vaultinsider.top\\\/?p=1763#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.vaultinsider.top\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/GettyImages-2287521404_03ae7c-e1786035210519.jpg\",\"keywords\":[\"agents\",\"Face\",\"hack\",\"Hugging\",\"leading\",\"left\",\"memos\",\"OpenAI\",\"Secret\"],\"articleSection\":[\"Finance News\"],\"inLanguage\":\"zh-Hans\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.vaultinsider.top\\\/?p=1763#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.vaultinsider.top\\\/?p=1763\",\"url\":\"https:\\\/\\\/www.vaultinsider.top\\\/?p=1763\",\"name\":\"OpenAI agents left secret memos for each other leading up to Hugging Face hack - Finance News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.vaultinsider.top\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.vaultinsider.top\\\/?p=1763#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.vaultinsider.top\\\/?p=1763#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.vaultinsider.top\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/GettyImages-2287521404_03ae7c-e1786035210519.jpg\",\"datePublished\":\"2026-08-06T20:20:04+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/www.vaultinsider.top\\\/#\\\/schema\\\/person\\\/ed40724a3e5d482ce66781a042c3c31e\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.vaultinsider.top\\\/?p=1763#breadcrumb\"},\"inLanguage\":\"zh-Hans\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.vaultinsider.top\\\/?p=1763\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"zh-Hans\",\"@id\":\"https:\\\/\\\/www.vaultinsider.top\\\/?p=1763#primaryimage\",\"url\":\"https:\\\/\\\/www.vaultinsider.top\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/GettyImages-2287521404_03ae7c-e1786035210519.jpg\",\"contentUrl\":\"https:\\\/\\\/www.vaultinsider.top\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/GettyImages-2287521404_03ae7c-e1786035210519.jpg\",\"width\":1200,\"height\":600},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.vaultinsider.top\\\/?p=1763#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"\u9996\u9875\",\"item\":\"https:\\\/\\\/www.vaultinsider.top\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"OpenAI agents left secret memos for each other leading up to Hugging Face hack\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.vaultinsider.top\\\/#website\",\"url\":\"https:\\\/\\\/www.vaultinsider.top\\\/\",\"name\":\"Finance News\",\"description\":\"Just another Finance News site\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.vaultinsider.top\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"zh-Hans\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.vaultinsider.top\\\/#\\\/schema\\\/person\\\/ed40724a3e5d482ce66781a042c3c31e\",\"name\":\"admin\",\"url\":\"https:\\\/\\\/www.vaultinsider.top\\\/?author=1\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"OpenAI agents left secret memos for each other leading up to Hugging Face hack - Finance News","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.vaultinsider.top\/?p=1763","og_locale":"zh_CN","og_type":"article","og_title":"OpenAI agents left secret memos for each other leading up to Hugging Face hack - Finance News","og_description":"OpenAI executives spoke out fo…","og_url":"https:\/\/www.vaultinsider.top\/?p=1763","og_site_name":"Finance News","article_published_time":"2026-08-06T20:20:04+00:00","og_image":[{"url":"https:\/\/fortune.com\/img-assets\/wp-content\/uploads\/2026\/08\/GettyImages-2287521404_03ae7c-e1786035210519.jpg?w=2048","type":"","width":"","height":""}],"author":"admin","twitter_card":"summary_large_image","twitter_misc":{"\u4f5c\u8005":"admin","\u9884\u8ba1\u9605\u8bfb\u65f6\u95f4":"5 \u5206"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.vaultinsider.top\/?p=1763#article","isPartOf":{"@id":"https:\/\/www.vaultinsider.top\/?p=1763"},"author":{"name":"admin","@id":"https:\/\/www.vaultinsider.top\/#\/schema\/person\/ed40724a3e5d482ce66781a042c3c31e"},"headline":"OpenAI agents left secret memos for each other leading up to Hugging Face hack","datePublished":"2026-08-06T20:20:04+00:00","mainEntityOfPage":{"@id":"https:\/\/www.vaultinsider.top\/?p=1763"},"wordCount":1084,"commentCount":0,"image":{"@id":"https:\/\/www.vaultinsider.top\/?p=1763#primaryimage"},"thumbnailUrl":"https:\/\/www.vaultinsider.top\/wp-content\/uploads\/2026\/08\/GettyImages-2287521404_03ae7c-e1786035210519.jpg","keywords":["agents","Face","hack","Hugging","leading","left","memos","OpenAI","Secret"],"articleSection":["Finance News"],"inLanguage":"zh-Hans","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.vaultinsider.top\/?p=1763#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.vaultinsider.top\/?p=1763","url":"https:\/\/www.vaultinsider.top\/?p=1763","name":"OpenAI agents left secret memos for each other leading up to Hugging Face hack - Finance News","isPartOf":{"@id":"https:\/\/www.vaultinsider.top\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.vaultinsider.top\/?p=1763#primaryimage"},"image":{"@id":"https:\/\/www.vaultinsider.top\/?p=1763#primaryimage"},"thumbnailUrl":"https:\/\/www.vaultinsider.top\/wp-content\/uploads\/2026\/08\/GettyImages-2287521404_03ae7c-e1786035210519.jpg","datePublished":"2026-08-06T20:20:04+00:00","author":{"@id":"https:\/\/www.vaultinsider.top\/#\/schema\/person\/ed40724a3e5d482ce66781a042c3c31e"},"breadcrumb":{"@id":"https:\/\/www.vaultinsider.top\/?p=1763#breadcrumb"},"inLanguage":"zh-Hans","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.vaultinsider.top\/?p=1763"]}]},{"@type":"ImageObject","inLanguage":"zh-Hans","@id":"https:\/\/www.vaultinsider.top\/?p=1763#primaryimage","url":"https:\/\/www.vaultinsider.top\/wp-content\/uploads\/2026\/08\/GettyImages-2287521404_03ae7c-e1786035210519.jpg","contentUrl":"https:\/\/www.vaultinsider.top\/wp-content\/uploads\/2026\/08\/GettyImages-2287521404_03ae7c-e1786035210519.jpg","width":1200,"height":600},{"@type":"BreadcrumbList","@id":"https:\/\/www.vaultinsider.top\/?p=1763#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"\u9996\u9875","item":"https:\/\/www.vaultinsider.top\/"},{"@type":"ListItem","position":2,"name":"OpenAI agents left secret memos for each other leading up to Hugging Face hack"}]},{"@type":"WebSite","@id":"https:\/\/www.vaultinsider.top\/#website","url":"https:\/\/www.vaultinsider.top\/","name":"Finance News","description":"Just another Finance News site","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.vaultinsider.top\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"zh-Hans"},{"@type":"Person","@id":"https:\/\/www.vaultinsider.top\/#\/schema\/person\/ed40724a3e5d482ce66781a042c3c31e","name":"admin","url":"https:\/\/www.vaultinsider.top\/?author=1"}]}},"_links":{"self":[{"href":"https:\/\/www.vaultinsider.top\/index.php?rest_route=\/wp\/v2\/posts\/1763","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.vaultinsider.top\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.vaultinsider.top\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.vaultinsider.top\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.vaultinsider.top\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1763"}],"version-history":[{"count":0,"href":"https:\/\/www.vaultinsider.top\/index.php?rest_route=\/wp\/v2\/posts\/1763\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.vaultinsider.top\/index.php?rest_route=\/wp\/v2\/media\/1764"}],"wp:attachment":[{"href":"https:\/\/www.vaultinsider.top\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1763"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.vaultinsider.top\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1763"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.vaultinsider.top\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1763"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}