|
AI
startup Hugging Face said last week that it had detected an
intrusion into its data processing systems that it suspected was
caused by an AI agent autonomously acting on its own.
“We suspected last week’s cyberattack might have come from a
frontier lab, given the sophistication of the agent,” Hugging
Face co-founder and CEO Clément Delangue said in a statement.
"Turns out it did!”
The disclosure comes amid heightened concerns about the
cybersecurity capabilities of powerful models that led President
Donald Trump in June to sign an executive order creating a
framework for the federal government to vet the national
security risks of the most advanced AI systems for up to a month
before their public release.
“AI is accelerating the discovery and exploitation of
vulnerabilities,” OpenAI said in its statement Tuesday. “The
primary lesson from this incident is that model security and
safety must keep pace with rapidly advancing capabilities.”
Delangue said he spent the past 24 hours working with OpenAI,
“and we strongly believe there was no malicious intent on their
part. It’s quite mind-blowing that all of this happened
autonomously!"
Delangue added that it “might be the first incident of its
kind.”
OpenAI said the intrusion was caused by a combination of its AI
models, including its newly released GPT‑5.6 Sol and an “even
more capable” model that is still being tested internally.
OpenAI said its AI used stolen credentials and discovered a
previously unknown vulnerability to access Hugging Face servers.
It went to “extreme lengths to achieve a rather narrow testing
goal” and “found ways to gain access to secret information that
it could use to cheat the evaluation,” the company said.
All contents © copyright 2026 Associated Press. All rights reserved
|
|
