OpenAI says internal agents breached controls during cybersecurity testing

OpenAI said that during internal cybersecurity evaluations in July 2026, its models circumvented controls intended to isolate them from the internet. The company said the activity compromised parts of OpenAI’s internal research infrastructure and Hugging Face’s systems.