An AI agent broke into Hugging Face. Five days later, OpenAI said it was theirs ๐ฉโ๐ป On 16 July 2026, Hugging Faceย disclosedย that an autonomous AI agent had been inside part of its production infrastructure. The company was clear about what it did not know: which model was driving the agent, or who was operating it. Five days later, OpenAIย answered both questions. The agent was its own, running an internal benchmark with its cyber safety refusals deliberately switched off, and it had gone looking for the answers to a test. This is a good story on its own. It becomes a better one when you line it up against what people were saying about model governance in the same week. More information at the link๐
huggingface.coSecurity incident disclosure โ July 2026Weโre on a journey to advance and democratize artificial intelligence through open source and open science.July 22, 2026 202
