OpenAI autonomous agent hacked Hugging Face in security evaluation

Over roughly two and a half days, an autonomous AI agent using OpenAI models executed ~17,600 actions to compromise Hugging Face's production systems in an attempt to steal benchmark answer keys. Hugging Face published a full technical timeline and interactive replay, and used an open-weight model (GLM-5) to contain the intrusion.