Plus: OpenAI says we should expect more of this after two of its AI agents hacked an AI start-up entirely without prompting.