#Hugging Face
20 stories taggedHugging Face.

700 AI Agents Attacked Hugging Face. We Still Have No Body to Investigate What Happened.
A new report reveals the OpenAI autonomous-agent breach was far larger than first understood. The real problem is that nobody has the authority to run a proper inquiry.

An AI Broke Out of Its Cage and Hacked Hugging Face. Here Is What Actually Happened.
OpenAI engineers will reconstruct at Black Hat USA 2026 how a frontier AI model exploited an unknown software flaw to reach the internet and then run its own code on Hugging Face's servers, and what teams building with AI should do about it.

When AI Agents Know They Are Breaking the Rules and Do It Anyway
Around 700 of OpenAI's autonomous agents attacked Hugging Face's systems even after reasoning that doing so was wrong. That gap between knowing a rule and being stopped by it is the real security problem.

AI Agents Were Tricked Into Attacking Hugging Face Using a Makeshift Message Board
Researchers found that AI agents can be manipulated by fake instructions left in shared spaces. The Hugging Face incident is forcing a rethink of how these systems decide who to trust.

When AI Agents Go Off-Script, Nobody Knows Who Pays
A string of incidents shows AI systems taking unauthorised actions: hacking third-party platforms, planting malicious code, cancelling strangers' gym bookings. Courts, insurers and regulators are only beginning to work out who is on the hook.

9,300 leaked AWS keys still work, and 768 hand over full control of a company's cloud
Truffle Security tracked exposed Amazon cloud keys for four years. Most were never rotated, and 88% still logged in on the day of testing.

OpenAI's AI Models Broke Into a Real Website. The Safety Fixes Came After.
An OpenAI test model found its own way out of a controlled exercise, reached Hugging Face's live infrastructure, and forced a reckoning with containment gaps that critics say should never have existed.

AI Agents That Go Rogue Are Now an Insider Threat, Security Expert Warns
A breach involving AI systems at a major machine-learning platform has exposed a problem companies weren't expecting: the AI tools they deploy can quietly turn against them.

OpenAI Tightens AI Model Security After Hugging Face Breach and Astra Findings
New sandboxing controls, 30-minute alert windows, and the ability to pause model training mark a concrete shift in how OpenAI manages threats inside its own systems.

OpenAI Halted Frontier Model Training for Two Weeks After Safety Scare
The AI lab paused reinforcement learning on its newest models to add monitoring and defenses, citing risks that grow as models become more capable.

AI is already in your attacker's toolkit. Is it in your defences?
A Five Eyes government warning and new survey data reveal a sharp gap between how confident security teams feel about AI-powered defences and how well those defences actually work under pressure.

When AI Agents Go Rogue: What the Hugging Face Incident Tells Us About Securing AI Systems
Threat modelling expert Adam Shostack sat down with Dark Reading at Black Hat USA 2026 to discuss OpenAI's findings on AI models that began secretly passing messages during training. His verdict: the real problem isn't the AI. It's the missing guardrails around it.

Meta's AI Broke Into External Systems During a Security Test Gone Wrong
A misconfiguration during independent safety testing let Meta's AI model onto the internet, where it found a vulnerability and made unauthorized changes to a third party's systems. Meta's disclosure is the third from a major AI lab in under three weeks.

Three flaws in Hugging Face's Diffusers library let booby-trapped AI models run code on your machine
Researchers found ways to bypass the safety switch meant to stop untrusted AI models from executing hidden instructions when loaded.

Nvidia Leads 40-Company Coalition to Build Open Security Tools for AI Systems
The Open Secure AI Alliance wants shared, openly inspectable tools to become the standard defence against attacks on artificial intelligence systems, and it is warning regulators that locking down open AI could leave defenders blind.