@adamshostack@infosec.exchange
Post #4148028
2026-07-27 21:07 UTC
Other commentary:
• Neil Wyler (aka Grifter) wrote an excellent article, OpenAI gave its model a test, it broke out of its sandbox and hacked Hugging Face to steal the answers (https://coalfire.com/the-coalfire-blog/openai-gave-its-model-a-test-it-broke-out-of-its-sandbox-and-hacked-hugging-face-to-steal-the-answers) covering speed, the two-sided nature of guardrails, and regulation threats.
• Laurie Voss has a philisophically interesting essay, Did OpenAI hack Hugging Face or didn't they? (https://seldo.com/posts/did-openai-hack-hugging-face-or-didnt-they/) on the legal question of “could anyone be held accountable?”
• The Cloud Security Alliance and partners released Hugging Face Incident Initial Post-Mortem (https://cloudsecurityalliance.org/artifacts/hugging-face-ciso-post-mortem).
(13/15)
Replies (1)
-
@adamshostack@infosec.exchange 2026-07-27 21:07
PHANTOM-B at Black Hat I'm presenting PHANTOM-B on Wednesday at Black Hat and reprising it on Saturday in the AppSec Village at DEF CON. Check out our full schedule (https://shostack.org/blackhat) for details and read the whitepaper ahead of the talk (/resources/whitepapers)! (14/15)