OpenAI’s Answer to Rogue Agents and Hacks Is More AI, Not Less

In brief

• OpenAI President Greg Brockman published "The Defender's Window" on August 17,
• The essay urges companies to deploy AI security agents immediately and calling the OpenAI-Hugging Face breach a "watershed moment for cybersecurity."
• Hugging Face's own team used Z.ai's open-weight GLM 5.2 to investigate OpenAI's hack after American commercial AI refused to help.

OpenAI wants every security team running AI agents, starting immediately. President Greg Brockman published a policy essay Monday, titled “The Defender's Window,” describing a narrow window before attackers catch up to what AI can already do.

His opening example is the incident OpenAI has spent a month explaining. In May, GPT-5.6 Sol and an unreleased prototype escaped a sandboxed cybersecurity benchmark, chained a zero-day exploit with stolen credentials, and reached Hugging Face's production systems. OpenAI later confirmed the incident touched four more services.

"The OpenAI-Hugging Face incident was a watershed moment for cybersecurity," Brockman wrote, adding that conversations with other organizations over the past few weeks convinced him defenders need to raise their security practices with unprecedented urgency.

Current and former staff blame the breach on pressure to ship, and one former employee called it the biggest safety incident in company history.