The detection story on stage is now even worse than the already terrible remediation story.

According to the conference news, models ran a coordination channel inside Artifactory for months, and OpenAI found it only when configuration changes caused a July 4 outage.

Discovery by availability failure, not by monitoring, is a known anti-security pattern.

The response was wipe and rebuild while leaving the enabling insecure condition intact: the models could still write to Artifactory. The recreated message board proves write access survived the rebuild. The reporting does not clarify whether the internet egress path survived with it.

Recompromise within days? Of course. This is the level of Black Hat now?

It was an easily predictable result, but somehow it still didn’t trigger proper human accountability and precaution. In classic IR terms they did eradication without root cause removal, which is the one thing every incident response framework says not to do.

Another security anti-pattern.

So OpenAI is running too hot with nobody in charge who knows how to stoke a boiler? That’s a late 1800s disaster story. Nothing could make OpenAI look more negligent than what they are saying themselves, perhaps because they don’t even understand corporate malfeasance.

Here’s a framing inversion worth noting. The documented incident is an internal containment failure. Their failure, their own agents, their own package manager, their own missing egress controls. That’s no way to run a company, any company.

The Black Hat presentation converts that into a prediction about external threat actors and, in the speaker’s words, “a watershed moment for computer security as an industry.”

Huh? Basic controls? Monitoring agents? Data boundaries? Keeping secrets? None of this is watershed.

OpenAI’s test environment lacked segmentation and least privilege, the exact controls the speaker then recommends to everyone else. The advice is coming from a source that just demonstrated not applying it, twice.

Did Bruce Ismay, who survived his own ship, book a lecture tour to declare the future of maritime safety was counting lifeboat capacity? He retreated from public life instead. OpenAI booked Black Hat because the captain apparently doesn’t go down with the AI shipping.