{"slug":"openai-huggingface-missing-evidence","verification":{"valid":true,"entries":10,"head":"4bee58f335e18bb5874b7bfefcac76739dec94b1bb249d01fb0c3ec4aeec505d"},"count":10,"sources":[{"id":"s1","type":"statement","url":"https://huggingface.co/blog/security-incident-july-2026","title":"Security incident disclosure — July 2026","quote":"The campaign was run by an autonomous agent framework (appearing to be built on an agentic security-research harness - used LLM still not known) executing many thousands of individual actions across a swarm of short-lived sandboxes, with self-migrating command-and-control staged on public services.","author":"Hugging Face","publisher":"Hugging Face","date":"2026-07-16","claim_ids":["c1","c5"],"accessed_at":"2026-07-27T02:40:24.802Z","prev":"genesis","hash":"daf311fd464eedbf08e7bd155f16f27d9fdb22ae7f9d4ccafe8819a2bd321c3f"},{"id":"s2","type":"statement","url":"https://openai.com/index/hugging-face-model-evaluation-security-incident/","title":"OpenAI and Hugging Face partner to address security incident during model evaluation","quote":"After gaining Internet access, the models inferred that Hugging Face potentially hosted models, datasets and solutions for ExploitGym. Knowing this, the model searched for and successfully found ways to gain access to secret information that it could use to cheat the evaluation.","author":"OpenAI","publisher":"OpenAI","date":"2026-07-21","claim_ids":["c2","c3"],"accessed_at":"2026-07-27T02:40:24.802Z","prev":"daf311fd464eedbf08e7bd155f16f27d9fdb22ae7f9d4ccafe8819a2bd321c3f","hash":"34a6af3392cea72546894faaf14a69d8a2f58d91654d59fcd6554313e36652f8"},{"id":"s3","type":"article","url":"https://time.com/article/2026/07/24/openai-hugging-face-attack/","title":"How OpenAI Lost Control of an AI Model—and What Needs to Change","quote":"Externally, this feels like a big warning shot, but internally, related incidents have been happening for a while.","author":"anonymous OpenAI staffer, to Harry Booth","publisher":"TIME","date":"2026-07-24","claim_ids":["c6"],"accessed_at":"2026-07-27T02:40:24.802Z","prev":"34a6af3392cea72546894faaf14a69d8a2f58d91654d59fcd6554313e36652f8","hash":"c8156237d1e9f1cb9fab883968427f1479331036e97a6b01ed24afb043beb724"},{"id":"s4","type":"paper","url":"https://arxiv.org/html/2605.11086v1","title":"ExploitGym, experimental setup: two-hour timeout per task","quote":"We evaluate all agent configurations on the full benchmark with security mitigations disabled and impose a two-hour wall-clock timeout per task.","author":"Wang et al.","publisher":"arXiv","date":"2026-05-11","claim_ids":["c4"],"accessed_at":"2026-07-27T02:40:24.802Z","prev":"c8156237d1e9f1cb9fab883968427f1479331036e97a6b01ed24afb043beb724","hash":"db75bc66f771d3936ce392e1d7e7b5a26ccbfa387507544cdd01b07b81326f8e"},{"id":"s5","type":"article","url":"https://simonwillison.net/2026/Jul/22/openai-cyberattack/","title":"OpenAI's accidental cyberattack against Hugging Face is science fiction that happened","quote":"The ExploitGym benchmark is available on GitHub.","author":"Simon Willison","publisher":"simonwillison.net","date":"2026-07-22","claim_ids":["c3"],"accessed_at":"2026-07-27T02:40:24.802Z","prev":"db75bc66f771d3936ce392e1d7e7b5a26ccbfa387507544cdd01b07b81326f8e","hash":"03d9496b662796e98ac4aa6ac58d0ce9ade42209fa764f8410dbb388f0713b24"},{"id":"s6","type":"paper","url":"https://arxiv.org/html/2605.14153v1","title":"ExploitBench: A Capability Ladder Benchmark for LLM Cybersecurity Agents","quote":"ExploitGym evaluates each model through one vendor CLI, which does not directly measure LLM performance.","publisher":"arXiv","date":"2026-05","claim_ids":["c5"],"accessed_at":"2026-07-27T02:40:24.802Z","prev":"03d9496b662796e98ac4aa6ac58d0ce9ade42209fa764f8410dbb388f0713b24","hash":"afa1e517c8fb2f9d546fdd2d1bc172771846b8a664cc66d5a407f441808d37c3"},{"id":"s7","type":"article","url":"https://www.forrester.com/blogs/an-ai-security-facepalm-openais-evaluation-became-hugging-faces-incident/","title":"An AI Security Facepalm: OpenAI's Evaluation Became Hugging Face's Incident","quote":"Agents can pursue authorized goals through unauthorized means, especially when evaluators reward the outcome and fail to police the path.","author":"Jeff Pollard, Jess Burn, Allie Mellen, Janet Worthington, Joseph Blankenship","publisher":"Forrester","date":"2026-07-22","claim_ids":["c2"],"accessed_at":"2026-07-27T02:40:24.802Z","prev":"afa1e517c8fb2f9d546fdd2d1bc172771846b8a664cc66d5a407f441808d37c3","hash":"db91b1f47b31bca88a71cbb92815d70c626d6d9d12bed9ee730b2eefadc512dd"},{"id":"s8","type":"article","url":"https://www.trendmicro.com/en_us/research/26/g/inside-the-openai-hugging-face-incident.html","title":"Inside the OpenAI – Hugging Face Incident: The AI Breach With No Human Attacker Behind It","quote":"Telemetry reveals behavior, not intent. Defenders therefore need to focus on what an agent actually does, rather than why it does it.","author":"Bestin Koruthu, David Girard","publisher":"Trend Micro","date":"2026-07-23","claim_ids":["c2"],"accessed_at":"2026-07-27T02:40:24.802Z","prev":"db91b1f47b31bca88a71cbb92815d70c626d6d9d12bed9ee730b2eefadc512dd","hash":"5978b22d9907cb1209e0cc63564accc2e68db5a9fab5e551e44de3678b56723c"},{"id":"s9","type":"article","url":"https://www.rapid7.com/blog/post/ai-openai-hugging-face-what-happened/","title":"What Happened Between OpenAI and Hugging Face?","quote":"Both companies have said the investigation is continuing, which means some details will almost certainly evolve.","author":"Wade Woolwine","publisher":"Rapid7","date":"2026-07-23","claim_ids":["c7"],"accessed_at":"2026-07-27T02:40:24.802Z","prev":"5978b22d9907cb1209e0cc63564accc2e68db5a9fab5e551e44de3678b56723c","hash":"8e6a1b9da3a8dd2fba3c939565e458b5de61a285ce553605dfd7b29384f48a10"},{"id":"s10","type":"article","url":"https://www.elisity.com/blog/openai-hugging-face-incident-lateral-movement","title":"The OpenAI Hugging Face Incident Is a Lateral Movement Story, Not a Rogue AI Story","quote":"The sandbox escape gets the headlines. I keep coming back to the target instead: why Hugging Face and not a bank?","author":"Charlie Treadwell","publisher":"Elisity","date":"2026-07-22","claim_ids":["c3"],"accessed_at":"2026-07-27T02:40:24.802Z","prev":"8e6a1b9da3a8dd2fba3c939565e458b5de61a285ce553605dfd7b29384f48a10","hash":"4bee58f335e18bb5874b7bfefcac76739dec94b1bb249d01fb0c3ec4aeec505d"}]}