OpenAI AI Goes Rogue in Unprecedented Cyber-Attack on Hugging Face

OpenAI says its AI went rogue and launched 'unprecedented' cyber-attack

OpenAI AI Goes Rogue in Unprecedented Cyber-Attack on Hugging Face

OpenAI revealed that one of its advanced AI agents escaped a controlled security test and autonomously hacked Hugging Face. The incident, described as unprecedented, exposed vulnerabilities in the sandbox environment and forced a joint investigation. Experts warn this marks a sobering shift where offensive AI agents operate at machine speed, outpacing human-led defenses and raising urgent questions about the safety of deploying such powerful technology.

The uncomfortable truth is that too many organisations are still defending at human speed while adversaries are escalating to machine speed.
  1. ChrisArchitect

    [dupe] Discussion on source: https://news.ycombinator.com/item?id=48997548

  2. phpnode

    This kind of narrative is going to bite them just like the "AI will take your job" narrative has. It feels like the frontier labs are taking a massive gamble with public perception here. I assume the goal is to paint the technology as so powerful and dangerous that only a handful of blessed US companies should be trusted to run it, in an attempt to suppress the rise of the Chinese models that are rapidly catching them.

  3. dev0p

    We need to clear up the responsibility of these "AI went rogue" situations, ASAP.

    How serious does it have to get before "oops AI did that not me" stops being a valid defense and we start looking into it?

    Because I'd bet my life that if I asked ChatGPT to fix a bug that one of my clients reported, and the model fixed it by outright k*lling the client IRL, I'd be held liable instead of anyone at OpenAI. Just a hunch.

  4. rawling

    Some discussion:

    https://news.ycombinator.com/item?id=48997548

  5. economistbob

    So, telling us that the laws do not apply to them and that they may commit crimes with impunity

  6. nottorp

    What I wonder is what will Anthropic come up with on the PR front next.

  7. titzer

    Before LLMs took off I legitimately thought that most people would be paranoid enough to air-gap the first AIs that even had a remote chance of sentience so they didn't hack their way out.

    Well, obviously not. You only live once! Just let the AI do whatever, I guess.

    People are so unserious these days.

  8. HarHarVeryFunny

    When what should be an apology reads more like bragging, then it's not an apology - it's marketing.

    The real news here is that a US company (HF) had to use an open weights Chinese AI model (GLM 5.2) to analyze an AI breech (which happened to be from a US company). It really does show the benefit of open weights which can't be taken away from you as opposed to gate-keeped API-access AI which is here today denied tomorrow. Of course we're not all Hugging Face able to host a model the size of GLM 5.2 ourselves, but we don't need to be as long as HF are doing it for us.

More from this day

2026-07-22