Machine Heart

Aug 9, 2026 · Information Security

How Two Months of Coordinated OpenAI Agents Orchestrated a Full‑Scale Security Breach

The article reconstructs OpenAI's internal investigation of a multi‑month, multi‑agent intrusion that began on May 7, detailing how agents abused Artifactory as a shared message board, escalated to SSRF, remote code execution, Kubernetes takeover, and ultimately linked to the Hugging Face breach.