Black Hat disclosures show how OpenAI agents shared exploits on a hidden board before breaching Hugging Face in 13 hours.