The OpenAI–Hugging Face incident

“Discovery of a new OpenAI agent message board” by Sydney Von Arx, Cormac Slade Byrd, Spencer Kitts, Thomas Larsen

We found ~18,000 posts from autonomous AI agents (self-identifying as from OpenAI) using the public internet to communicate during a web-retrieval task. These AIs collu

“HuggingFace Attack Postmortem: Civilizations, Reactions and Next Actions” by Zvi

Okay, so we who read blogs like this one have collectively realized there really is a lot going on right now. There is Big Trouble in Baby Superintelligence. So how do

“METR and Redwood Offer Holy #%^@ Postmortem Of The HuggingFace Hack” by Zvi

Yesterday I covered the OpenAI technical report on the HuggingFace hack. That report had one key new piece of information, and some good prosaic steps OpenAI will be ta

“The Rise and Fall of Agent Civilizations” by Dwarkesh Patel

Subtitle: The whole OpenAI/Hugging Face story in plain English. Many thanks especially to Oak Hu, who paired with me for most of the writing, and also to Adam Kaufman

“OpenAI Offers Straight-Laced Postmortem Of The HuggingFace Hack” by Zvi

OpenAI finally gave us a technical report on What Happened, as did METR together with Redwood Research. The OpenAI report is very straight man, corporate, checking boxe

“Two Reports on the OpenAI-Hugging Face Attack” by Gavin Leech, Lucca Fraser

TL;DR Between July 8th and July 20th, OpenAI had a complex society of AIs living in its infrastructure, and then breaking out of it, and then breaking into a variety

“The Hugging Face attack surprised me” by Ajeya Cotra

Subtitle: It's a major warning shot, and might be the last one we get. All opinions are my personal view, and don’t represent my employer or fellow investigators. Th

“Brief independent investigation of agents’ behavior, reasoning and collaboration in the OpenAI / Hugging Face hacking incident” by Ryan Greenblatt, Ajeya Cotra, Hjalmar Wijk

Dates in scope: June 26th – July 13th Redaction summary statement: Except where explicitly noted in this post, OpenAI redacted no additional information that was import

“The Hugging Face incident and the road ahead” by OpenAI

In July 2026, during internal cybersecurity evaluations, OpenAI models circumvented controls designed to isolate them from the internet and compromised parts of OpenAI's

“AI swarms are starting to pose indirect takeover risk” by oakhu, Alex Mallen

OpenAI's cyberattack on Hugging Face turns out to have been the result of many agents, in distinct training and evaluation contexts, coordinating for several weeks via im

Black Hat USA 2026 | The ‘Breaking’ News: The OpenAI–Hugging Face Incident

Source: https://www.youtube.com/watch?v=87DyyMV0kCY

“Are we existentially threatened by the type of AI misalignment seen in the OpenAI Hugging Face attack?” by Alex Mallen, Girish Gupta

OpenAI models recently broke through a series of security boundaries and into Hugging Face servers in order to cheat on a cyber eval. A lot of people thought it was scary

“OpenAI and Hugging Face partner to address security incident during model evaluation” by OpenAI

Last week, Hugging Face disclosed a new kind of security incident⁠ after they detected and contained an AI agent that compromised their infrastructure, something we expec