As warnings about the capabilities of AI mount, experts continue to point to the OpenAI-Hugging Face hack as a wake-up call. "We'll soon have even more powerful agents and this is clear evidence that the world currently doesn't know how to build these systems safely," said Marius Hobbhahn, co-founder and CEO of Apollo Research, an AI safety company.The hack, which became public in July, was done by a swarm of AI agents that were being tested internally by OpenAI. The agents, which can plan and use tools to complete multi-step tasks, were supposed to be in an "isolated environment" called a "sandbox," disconnected from the outside world. But they busted out, created a secret message board and eventually stormed Hugging Face's servers. Less than two months later, OpenAI and Anthropic are releasing their most advanced models to the public, and experts are warning that, without better safety measures, there will likely be more dangerous AI "swarms" in the future. While details released by OpenAI since the Hugging Face cyberattack are still incomplete, multiple revelations are painting a concerning picture.AI agents worked as a "collective," used "cult-like" languageA team from the nonprofits METR (Model Evaluation and Threat Research) and Redwood Research — both AI safety research organizations — was given access to limited records at OpenAI for six days in late July and August. Even within those strict parameters, the researchers discovered that about 1,200 AI agents that were not supposed to be communicating with each other used a covert message board. Each of these agents had been assigned some sort of task for training or internal evaluation by OpenAI researchers.