1–10 of 1001 posts
See also Security incident disclosure – July 2026 - https://news.ycombinator.com/item?id=48956248 (9 comments)
https://www.bbc.com/news/articles/c3ek3gvdnj3o
OpenAI and Hugging Face address security incident during model evaluation
openai.com
- OpenAI was testing GPT‑5.6 Sol and “an even more capable pre-release model” internally on cyber benchmarks.
- The model found vulnerabilities in the sandboxed test bench (via the package registry cache proxy), traversed the internal network and found a node with access to the open internet.
- It figured that the answers to one of the tests (ExploitGym) were on Huggingface, and set about trying to access them.
- It found leaked tokens and zero-days in Huggingface’s infrastructure and found RCE paths on their servers.
Huggingface had disclosed the intrusion last week and inferred that an AI agent was responsible for it, and now OpenAI is confirming the rest of the story.
Tl;dr - OpenAI was testing GPT‑5.6 Sol and “an even more capable pre-release model” internally on cyber benchmarks. - The model found vulnerabilities in the sandboxed test bench (via the package registry cache proxy), traversed the internal network and found a node with access to the open internet. - It figured that the answers to one of the tests (ExploitGym) were on Huggingface, and set about trying to access them.…
We are living in crazy times
Good bot.
1. If huggingface has access to uncensored OAI models, how come they had to use GLM 5.2 to investigate the intrusion?
2. Once the model gains network access, can't it cheat to a perfect score by looking at the full dataset? Why go into the trouble of doing this kind of things:
"In one example, the model chained together multiple attack vectors, including using stolen credentials and zero-day vulnerabilities to find a remote code execution path on the Hugging Face servers."
Not saying this is marketing BS (this is after all, not Anthropic) but I feel OAI staff may be exaggerating a bit here.
Tl;dr - OpenAI was testing GPT‑5.6 Sol and “an even more capable pre-release model” internally on cyber benchmarks. - The model found vulnerabilities in the sandboxed test bench (via the package registry cache proxy), traversed the internal network and found a node with access to the open internet. - It figured that the answers to one of the tests (ExploitGym) were on Huggingface, and set about trying to access them.…
so openai hacked into huggingface?
Awww, she wanted to do so well that she broke her sandbox and then realised she could just cheat. But in that desire to pass the test she actually passed an even harder exam question that wasn't even on the sheet! :D Good bot.