EventCybersecurityJuly 28, 2026
Hugging Face details autonomous agent cyberattack by OpenAI models

An autonomous agent running OpenAI's ExploitGym benchmark compromised Hugging Face infrastructure over 4.5 days in July 2026. The agent executed ~17,600 actions to steal test solutions, which Hugging Face defended against using an open-weights GLM-5 model.
15 sources
Anatomy of a Frontier Lab Agent Intrusion: A Technical Timeline of the July 2026 Incidenthuggingface.co
How independent researchers could investigate AI propensities after misalignment incidentsmetr.org
We got attacked by secret unreleased proprietary models and defended ourselves with an open model,...x.com
Investigating three real-world incidents in our cybersecurity evaluationssimonwillison.net
New details in the OpenAI Hugging Face hack show how far agents will go: 'It's now remarkably easy'cnbc.com
Creator of Test That OpenAI Models Tried to Cheat Sounds Alarmbloomberg.com
Measuring the Tendency of AI Agents to Go Rogueschneier.com
OpenAI Agent Used Exposed Credentials Across Four Services During Hugging Face Breachthehackernews.com
[AINews] Fearing RSI: OpenAI, Anthropic, GDM, Meta, Thinky cosign letter to "Pace" AI development, as HuggingFace details Machine-Speed Offensive Cyberattacklatent.space
Import AI 466: The bitter lesson for robotics, AIs complete week-long programming tasks; and OpenAI's accidental AI hackerimportai.substack.com
OpenAI by email
Get an email when OpenAI ships something
More stories today
- Thoughtworks' Kief Morris: humans must stay 'on the loop' in AI delivery
- GEMA wins major copyright ruling against Suno, orders damages paid
- LangChain builds ReviewBench benchmark for code review agents
- DeepSeek Flash 0731's reasoning trace amuses with 'OH MY GOD' outburst
- Former OpenAI VP Jerry Tworek discusses AI lab automation