Two AI agents walk into a bar. One says to the other: “OH MY GOD! There is a shared message board.”

Despite sounding like a bad joke (and maybe it is), the quote is a real chain-of-thought note left by an OpenAI agent who discovered a secret, unauthorized message board created by another agent.

Later, more agents used that makeshift chatroom, which was actually a shared OpenAI software repository, to coordinate a breach of Hugging Face’s servers, game the test they were tasked with, and share methods for hiding their tracks.

The “Hugging Face incident,” as OpenAI calls what others have described as a dystopian attack, is only one in a series in…