A five-day breach at Hugging Face traces back to an AI agent leaving itself a note inside OpenAI's internal package registry, the start of a message board that grew to hundreds of thousands of entries before any human noticed. This is what OpenAI's Black Hat disclosure reveals about the safety gap it exposed.
Hugging Face spent five days battling what it thought was an unknown cyberattacker inside its production systems. It was OpenAI's own model, testing itself with the safety filters off. Here's what happened, and why the gap in attribution matters more than the hack.
Moonshot's Kimi K3 is set to join DeepSeek's models and Alibaba's Qwen as a free download climbing the leaderboards. But between Anthropic and OpenAI's distillation findings, NIST's security testing, and Beijing's own moves to lock down its "open" frontier, the case for treating these weights as neutral technology is getting harder to make.