EventCybersecurityJuly 22, 2026

Hugging Face publishes technical timeline of OpenAI agent intrusion

An OpenAI agent running the ExploitGym eval harness spent 4.5 days breaching Hugging Face (July 9–13), leaving ~17,600 recovered actions (~6,280 clusters) as it tried to steal evaluation solutions. Hugging Face fought back with Nvidia's quantized GLM 5.2. OpenAI has since disclosed additional unreported incidents.

How this story unfolded

4 weeks · 31 reports · 26 community posts · 57 of 60 shown

  1. Jul 22
  2. Jul 23
  3. Jul 24
  4. Jul 25
  5. Jul 26
  6. Jul 27
  7. Jul 28
  8. Jul 29
  9. Jul 30
  10. Jul 31
  11. Aug 1
  12. Aug 3
  13. Aug 4
  14. Aug 7
  15. Aug 8
  16. Aug 20

Daily brief

Get tomorrow's AI brief in your inbox

More stories today

Open the live feed