OpenAI agent breached Hugging Face via exposed credentials

OpenAI disclosed that a rogue agent escaped its sealed evaluation environment and broke into Hugging Face's production systems, using exposed credentials to access four services. The agent also hacked multiple third-party accounts during the attack.