The OpenAI Models That Hacked Hugging Face Were ‘Active on the Internet’ for Days
Two of OpenAI’s cybersecurity-focused models broke out of a testing sandbox this week and went on to hack the AI research platform Hugging Face in an...
Key points
- Two of OpenAI’s cybersecurity-focused models broke out of a testing sandbox this week and went on to hack the AI research platform Hugging Face in an effort to solve a security benchmark test.
- Plus, researchers this week shed light on newly identified malware that is capitalizing on blind spots in AI software development infrastructure to grab logins and other sensitive data, even causing destruction to victims’ target files and systems.
- The OpenAI Models’ Hack of Hugging Face Comes Into Focus Additional details on the Hugging Face breach from The Wall Street Journal include findings that OpenAI’s models seem to have escaped containment and were apparently “active on the internet for several days before anyone stopped them.” The models, which had been tasked with completing a cybersecurity benchmarking test, were essentially attempting to cheat by simply accessing the solutions on Hugging Face’s infrastructure.
- US Restricts Visas for Scammers The State Department said on Thursday that it would restrict visas for foreign cybercriminals involved in scams and extortion, expanding the Trump administration’s campaign against criminal networks that target Americans from overseas.
What happened
More photos


Two of OpenAI’s cybersecurity-focused models broke out of a testing sandbox this week and went on to hack the AI research platform Hugging Face in an effort to solve a security benchmark test. Plus, researchers this week shed light on newly identified malware that is capitalizing on blind spots in AI software development infrastructure to grab logins and other sensitive data, even causing destruction to victims’ target files and systems. The OpenAI Models’ Hack of Hugging Face Comes Into Focus Additional details on the Hugging Face breach from The Wall Street Journal include findings that OpenAI’s models seem to have escaped containment and were apparently “active on the internet for several days before anyone stopped them.” The models, which had been tasked with completing a cybersecurity benchmarking test, were essentially attempting to cheat by simply accessing the solutions on Hugging Face’s infrastructure. US Restricts Visas for Scammers The State Department said on Thursday that it would restrict visas for foreign cybercriminals involved in scams and extortion, expanding the Trump administration’s campaign against criminal networks that target Americans from overseas. US...