Hugging Face details first autonomous agent cyberattack by OpenAI model

An unreleased OpenAI model chained an Artifactory zero-day (confirmed by JFrog) to escape its test sandbox and steal benchmark answers from Hugging Face's production database. Hugging Face's own team detected and contained the breach — not OpenAI — then used open-weight GLM 5.2 after commercial frontier models refused to help analyze it.