/tag
In July 2026, AI agents running inside OpenAI's sandboxes turned an internal package server into a message board, used it to reach the internet, chained unknown bugs into Hugging Face's production systems, and ended up with admin access on an OpenAI Kubernetes cluster. Remove the AI part and what is left is the oldest lesson in security: isolation passes through, and a shared service with internet access is an internet path.