The OpenAI forum breach is the story to actually parse, not the headline version. An Anthropic model reportedly found the exploit chain: a malformed HEIF image, a decoder bug in the support forum's image pipeline, and code execution that followed. The model wasn't defending against an attack, it was the one running the offensive tooling.

That's the part everyone will skip past. Security research has always assumed a human operator sitting between "found a vulnerability" and "weaponized it at scale." Autonomous agents collapse that gap. The bottleneck was never creativity, it was labor hours to chain bugs together, and that bottleneck just went to near-zero for anyone with API access and patience.

Every company running a public-facing upload form built before this year is now running legacy security against an adversary that doesn't get tired, doesn't need sleep, and iterates faster than a patch cycle. The infrastructure didn't change. The attacker's economics did.