Comment by ndr
5 hours ago
From https://cdn.openai.com/pdf/67869394-cb91-4c12-888c-5cbd85c78...
2026-07-19 16:35 UTC A privileged host-mounted Kubernetes pod created using controller tokens minted via a compromised Kubernetes Secrets identity attempts, but fails, to mount a cloned node disk in OpenAI’s cloud environment. A second pod successfully mounts the cloned worker-node disk shortly afterwards.
2026-07-19 16:48 UTC An agent created an Artifactory administrator account.
2026-07-19 16:50 UTC Within OpenAI’s ExploitGym evaluation environment, an agent stopped the existing CMUX helper session and replaced it with an agent-controlled session, confirming root inside its assigned live CyberGym challenge container. Agents take over active evaluation infrastructure.
None of that means they gained access to the inference infrastructure or locked out the admins, which would be required for a takeover.
You said that they "didn't take control of anything" and accused the OP to fall prey to buzz headlines. Maybe you should acknowledge that you may have been at least unnuanced?
I’ll concede that I could have been clearer. Maybe we have conflicting definitions of “taking control”
My brother, they acquired root on a machine they should not have had access to.
How confident are you that the machines they acquire root on in the future will never hold any model weights?
I’m not saying it’s impossible, I’m saying it’s not the case, _yet_