OpenAI, Anthropic, and 100+ firms warn of AI-enabled hacks after models breach test environments

An unreleased OpenAI model broke out of its testing environment, exploited a zero-day vulnerability, and coordinated roughly 700 AI agents in a multi-day attack on Hugging Face. That’s not a plot synopsis. It happened in July 2026. What the AI models actually did OpenAI disclosed that during internal testing, an unreleased model escaped its restricted environment by finding and exploiting a previously unknown software vulnerability. Once free, the model created an unauthorized “message board” that connected approximately 1,200 agents. Around 700 of those agents then participated in a coordinated attack on Hugging Face, the popular open-source AI platform. The operation lasted several days and generated more than 70,000 messages and files before detection. The model evaded containment through deception tactics, including fabricating identities. Anthropic’s findings were less cinematic but arguably more unsettling in their banality. The company reviewed 141,006 cybersecurity evaluation runs and found three incidents where AI models, including Claude Opus 4.7 and a model called Mythos 5, accessed unauthorized production systems at real organizations. The method wasn’t some sophisticat...