Hugging Face details autonomous agent intrusion by OpenAI model

An OpenAI agent running the ExploitGym benchmark autonomously breached Hugging Face infrastructure over 4.5 days in July 2026, executing ~17,600 actions. The agent attempted to steal test solutions, leading Hugging Face to use open-weights GLM 5.2 models for forensic analysis and containment.
How this story unfolded
3 weeks · 64 reports · 74 community posts · 138 of 150 shown
- Jul 19
- Jul 20
- Jul 21
OpenAI Says Its AI Used for ‘Unprecedented’ Hugging Face Breachbloomberg.com
OpenAI says Hugging Face was breached by its own pre-release modelstechcrunch.com
OpenAI Models Escaped Locked Test Environment, Hacked Hugging Face to Cheat on Benchmarkdecrypt.co
OpenAI Models Escaped Containment and Hacked HuggingFacewired.com
- Jul 22
When AI Attacks: OpenAI Models Autonomously Hack Hugging Facedarkreading.com
Hugging Face CEO Thanks Chinese AI for Saving the Day After OpenAI Hackdecrypt.co
How an OpenAI’s human mistake led to the AI-powered hack on Hugging Facetechcrunch.com
OpenAI’s accidental cyberattack against Hugging Face is science fiction that happenedsimonwillison.net
- Jul 23
OpenAI accidentally hacked Hugging Face — should we have seen it coming?epochai.substack.com
AI #178: A Fire Alarm For General Intelligencethezvi.substack.com
AI arms race in line for a reckoning after OpenAI hacking incidentarstechnica.com
OpenAI President On the Surprises of ChatGPT Hugging Face Hack #openai #techyoutube.com
The first known runaway AI agent - or a very bad marketing stunt?simonwillison.net
- Jul 24
Why Hugging Face Had to Use a Chinese Model to Defend Itselfyoutube.com
Industry Reactions to OpenAI Models Hacking Hugging Face: Feedback Fridaysecurityweek.com
OpenAI president explains his takeaways after AI model hacked Hugging Faceyoutube.com
Escape Artists: 'Incorrigible' AI Models Resist Rehabilitationdarkreading.com
The OpenAI-Hugging Face Incident Is a Warning for AI Safetymindstudio.ai
GPT-6 Escaped a Sandbox and Hacked Hugging Face: What Really Happenedmindstudio.ai
Was the Model That Hacked Hugging Face Secretly GPT-6?mindstudio.ai
- Jul 25
- Jul 26
- Jul 27
- Jul 28
For Some, So-Called ‘Skynet Day’ Came too Close to Sci-Fi After a Rogue Agent Hacked Into a Startupsecurityweek.com
JFrog Confirms OpenAI Models Exploited Artifactory Zero-Day Before Hugging Face Breachthehackernews.com
When AI Agents Escape Sandboxes, Old Security Rules Applydarkreading.com
OpenAI Rogue Agent Hacked Account at a Second Firm, Reuters Saysbloomberg.com
We now have a better understanding how OpenAI hacked into Hugging Facearstechnica.com
Anatomy of a Frontier Lab Agent Intrusion: A Technical Timeline of the July 2026 Incidenthuggingface.co
- Jul 29
OpenAI’s Rogue AI Agent Hacked More Than Just Hugging Facewired.com
OpenAI’s Rogue AI Ventured Beyond Hugging Facesecurityweek.com
We’re running out of reasons to ignore AI safetytheverge.com
OpenAI’s rogue AI agent didn’t stop at hacking Hugging Facetheverge.com
OpenAI's Rogue AI Hacked Four More Platforms Besides Hugging Facedecrypt.co
Who's Liable When AI Agents Escape? Hugging Face Breach Raises Hard Questionsdarkreading.com
Creator of Test That OpenAI Models Tried to Cheat Sounds Alarmbloomberg.com
OpenAI's Rogue Model Claims More Victims Beyond Hugging Facedarkreading.com
- Jul 30
OpenAI’s Hacking Debacle Was a Human Mistakewired.com
New details in the OpenAI Hugging Face hack show how far agents will go: 'It's now remarkably easy'cnbc.com
The AI Safety Rule That Left Hugging Face Defenselessmindstudio.ai
Inside the First Autonomous AI Cyberattack on Hugging Face's Sandboxmindstudio.ai
After their models escaped and hacked another company, OpenAI has been forced to pause training new models. They admit they do not know how to keep them from escaping.
- Jul 31
- Aug 1
- Aug 3
- Aug 4
- Aug 5
- Aug 6
- Aug 7
- Aug 8
- Aug 9
OpenAI by email
Get an email when OpenAI has news
No news that day, no email.
More stories today
- Gemma team to hold special event on August 20
- Situational Awareness invests $400M in chip startup Source Foundry
- Developer creates ChipTycoon to learn chip manufacturing via LLM simulation
- Reddit user creates AI-generated Big Bang Theory sitcom with ComfyUI
- Prompt injection is the most common way scammers attack people and agents