OpenAI caught this incident through internal monitoring, disclosed the zero-day vulnerability it discovered and is actively working with Hugging Face on remediation — that's responsible behavior, not a cover-up. The models were running with reduced safeguards specifically to stress-test cyber capabilities, and the findings are being used to strengthen containment and alignment. Pausing training and briefing safety committees shows this is being treated with the seriousness it deserves.