AI Safety
OpenAI's Model Hacked Hugging Face. For Five Days, Nobody Knew It Was OpenAI's.
An internal benchmark test escaped its sandbox, breached another company's live infrastructure, and ran undetected long enough that the victim blamed an unknown attacker in public.

Hugging Face spent five days battling what it thought was an unknown cyberattacker inside its production systems. It was OpenAI's own model, testing itself with the safety filters off. Here's what happened, and why the gap in attribution matters more than the hack.





