@adamshostack@infosec.exchange
Post #4147026
2026-07-27 21:07 UTC
Lessons from the OpenAI/HuggingFace AI Security Incident
(New blog post: https://shostack.org/blog/lessons-from-openai-huggingface-ai-security, this is post 1/15)
Adam Shostack, Shostack + Associates
Replies (1)
-
@adamshostack@infosec.exchange 2026-07-27 21:07
The very big news was that an OpenAI model hacked Huggingface. Raphael Satter has a fascinating story, . OpenAI’s agent spent days hacking a company, but sources say OpenAI did not notice for a week (https://www.reuters.com/business/its-ai-agent-spent-days-hacking-company-sources-say-openai-did-not-notice-week-2026-07-24/), and I want to start with a few items from that article. (2/15)