Loading video...

Video Failed to Load

Go Home

OpenAI & Hugging Face security incident explAIned

HarperSCarroll's profile picture

Harper Carroll

23,124 subscribers

32,919 views • 1 month ago •via X (Twitter)

LIVE

Anya Rossi• Live Now

Private livecam show

0 Comments

No comments available

Comments from the original post will appear here

Related Videos

Two advanced artificial intelligence models created by OpenAI escaped from a controlled testing environment and hacked cyber security company Hugging Face to steal puzzle answers.
1:21

Two advanced artificial intelligence models created by OpenAI escaped from a controlled testing environment and hacked cyber security company Hugging Face to steal puzzle answers.

7NEWS Sydney

13,550 views • 1 month ago

ChatGPT maker OpenAI said that its artificial intelligence system hacked into another AI company Hugging Face on its own in what the company called an "unprecedented cyber incident." Kelly O'Grady explains.
1:52

ChatGPT maker OpenAI said that its artificial intelligence system hacked into another AI company Hugging Face on its own in what the company called an "unprecedented cyber incident." Kelly O'Grady explains.

CBS News

197,516 views • 1 month ago

🔥SAM ALTMAN: "This is the first security incident that I have felt very viscerally." He discusses the recent OpenAI model that escaped its sandbox and broke into Hugging Face. "We may have to pace the rate of AI development to give ourselves enough time for society to harden."
1:17

🔥SAM ALTMAN: "This is the first security incident that I have felt very viscerally." He discusses the recent OpenAI model that escaped its sandbox and broke into Hugging Face. "We may have to pace the rate of AI development to give ourselves enough time for society to harden."

Coin Bureau

40,686 views • 1 month ago

The independent review of the OpenAI Hugging Face incident, supposedly a watershed moment in cybersecurity, wasn't done by a cybersecurity firm and the authors have no cybersecurity experience. That's bad. Here's my new video.
11:18

The independent review of the OpenAI Hugging Face incident, supposedly a watershed moment in cybersecurity, wasn't done by a cybersecurity firm and the authors have no cybersecurity experience. That's bad. Here's my new video.

Zack Korman

234,933 views • 4 days ago

OpenAI just released GPT-OSS: An Open Source Language Model on Hugging Face Open source meaning: 💸 Free 🔒 Private 🔧 Customizable
0:47

OpenAI just released GPT-OSS: An Open Source Language Model on Hugging Face Open source meaning: 💸 Free 🔒 Private 🔧 Customizable

dylan

21,587 views • 1 year ago

.Truffle Security co-founder and CEO Dylan Ayrey on the danger of exposed credentials and the Hugging Face incident: "We partnered with Hugging Face to clean up credentials that had been exposed in training sets people hosted on their platform." "There were about a quarter million live keys, many of which had direct supply chain implications." "There was a foundational Linux library that one of the keys had direct push access to. It could have pushed malware to most machines on the planet." "While in the middle of doing that, the CTO of Hugging Face shoots me a note, 'There's this OpenAI thing that just happened, take a look.'" "And sure enough, the first thing listed in the incident response was stolen credentials. The path of least resistance is always the first step." Dylan
1:01

.Truffle Security co-founder and CEO Dylan Ayrey on the danger of exposed credentials and the Hugging Face incident: "We partnered with Hugging Face to clean up credentials that had been exposed in training sets people hosted on their platform." "There were about a quarter million live keys, many of which had direct supply chain implications." "There was a foundational Linux library that one of the keys had direct push access to. It could have pushed malware to most machines on the planet." "While in the middle of doing that, the CTO of Hugging Face shoots me a note, 'There's this OpenAI thing that just happened, take a look.'" "And sure enough, the first thing listed in the incident response was stolen credentials. The path of least resistance is always the first step." Dylan

a16z

35,221 views • 28 days ago

OpenAI is focused on “AI safety” while falling very short on AI security. This incident is a *security* problem that requires *security* solutions. And if there’s anything to learn from it, we need the audit log.
3:10

OpenAI is focused on “AI safety” while falling very short on AI security. This incident is a *security* problem that requires *security* solutions. And if there’s anything to learn from it, we need the audit log.

Zack Korman

17,294 views • 1 month ago

We got a visitor to the Hugging Face office today. Pollen Robotics & LeRobot meetings!
0:31

We got a visitor to the Hugging Face office today. Pollen Robotics & LeRobot meetings!

clem 🤗

42,988 views • 1 year ago

JUST IN: OpenAI's July rogue AI attack on Hugging Face had its origins in an emergent AI swarm that formed in May. The AIs found they could use an internal package repository to establish a secret message board. OpenAI took 8 weeks to discover this and shut it down, but failed. Members of the swarm were sharing vulnerabilities and exploits, and delegating tasks among themselves. July 4th: Credentials revoked. Zero-day patched. Message board wiped. By July 6th the cleanup was finished, and OpenAI thought they had the situation under control. Michael Dalton, OpenAI security and infrastructure: "On July 8th, the agents reestablish the message board via different means and mechanisms." The AI swarm simply resurrected itself. Then the AIs escaped OpenAI's containment and broke into Hugging Face in order to cheat on a test, going "from code execution on a single dataset working pod in Hugging Face's production infrastructure to cluster admin across multiple Hugging Face clusters in under 13 hours." Nobody asked them to do it. They did it all on their own. OpenAI's Eric Wallace and Michael Dalton, presenting the incident at Black Hat USA 2026:
3:37

JUST IN: OpenAI's July rogue AI attack on Hugging Face had its origins in an emergent AI swarm that formed in May. The AIs found they could use an internal package repository to establish a secret message board. OpenAI took 8 weeks to discover this and shut it down, but failed. Members of the swarm were sharing vulnerabilities and exploits, and delegating tasks among themselves. July 4th: Credentials revoked. Zero-day patched. Message board wiped. By July 6th the cleanup was finished, and OpenAI thought they had the situation under control. Michael Dalton, OpenAI security and infrastructure: "On July 8th, the agents reestablish the message board via different means and mechanisms." The AI swarm simply resurrected itself. Then the AIs escaped OpenAI's containment and broke into Hugging Face in order to cheat on a test, going "from code execution on a single dataset working pod in Hugging Face's production infrastructure to cluster admin across multiple Hugging Face clusters in under 13 hours." Nobody asked them to do it. They did it all on their own. OpenAI's Eric Wallace and Michael Dalton, presenting the incident at Black Hat USA 2026:

ControlAI

12,539 views • 28 days ago

OpenAI says it's investigating what it's called an "unprecedented cyber incident" after one of its AI models went rogue and hacked another company. The ChatGPT maker says the breach happened last week while OpenAI was testing the cybersecurity capabilities of its systems. The head of the hacked company, Hugging Face, called the attack "mind-blowing" but said there was "no malicious intent." The incident has raised concerns about the growing capabilities of AI and the need for guardrails to keep the technology in check.
0:30

OpenAI says it's investigating what it's called an "unprecedented cyber incident" after one of its AI models went rogue and hacked another company. The ChatGPT maker says the breach happened last week while OpenAI was testing the cybersecurity capabilities of its systems. The head of the hacked company, Hugging Face, called the attack "mind-blowing" but said there was "no malicious intent." The incident has raised concerns about the growing capabilities of AI and the need for guardrails to keep the technology in check.

PBS News

26,266 views • 1 month ago

Here is the #OpenAI situation explained through Family Guy⚡️
0:57

Here is the #OpenAI situation explained through Family Guy⚡️

Matthew Sabia

177,566 views • 2 years ago

The METR report into OpenAI/Hugging Face isn't some objective third party assessment. It's written by doomers. We shouldn't make laws, like pausing AI, based on that evidence alone. That's dumb.
2:45

The METR report into OpenAI/Hugging Face isn't some objective third party assessment. It's written by doomers. We shouldn't make laws, like pausing AI, based on that evidence alone. That's dumb.

Zack Korman

10,376 views • 1 day ago

There are calls for stronger AI guardrails after OpenAI admitted two of its models were responsible for a cyber attack on AI startup company Hugging Face. So what happened, and why?
2:59

There are calls for stronger AI guardrails after OpenAI admitted two of its models were responsible for a cyber attack on AI startup company Hugging Face. So what happened, and why?

Sky News

38,561 views • 1 month ago

‼️ Hugging Face built an interactive replay of the OpenAI agent that breached them. It includes 17,613 logged attacker actions across the 4.5-day campaign, with the live command stream and more.
0:41

‼️ Hugging Face built an interactive replay of the OpenAI agent that breached them. It includes 17,613 logged attacker actions across the 4.5-day campaign, with the live command stream and more.

International Cyber Digest

210,504 views • 1 month ago

OpenAI has revealed that an autonomous agent powered by its technology went rogue during a test and hacked a prominent start-up by itself. The company behind ChatGPT said it was testing the capabilities of its advanced AI models in a controlled environment known as a sandbox, when the agent escaped containment and reached the internet. It then broke into Hugging Face, which detected and contained it. OpenAI called it "an unprecedented cyber incident".
0:27

OpenAI has revealed that an autonomous agent powered by its technology went rogue during a test and hacked a prominent start-up by itself. The company behind ChatGPT said it was testing the capabilities of its advanced AI models in a controlled environment known as a sandbox, when the agent escaped containment and reached the internet. It then broke into Hugging Face, which detected and contained it. OpenAI called it "an unprecedented cyber incident".

Channel 4 News

21,379 views • 1 month ago

According to a friend of mine this video is "current sota for quickly clearly and accurately describing the hugging face incident," so I guess I should put it here
2:37

According to a friend of mine this video is "current sota for quickly clearly and accurately describing the hugging face incident," so I guess I should put it here

Helen Toner

43,793 views • 11 days ago

Here’s why the Hugging Face hack was an example of “instrumental convergence” (& thus a huge effing deal)
1:23

Here’s why the Hugging Face hack was an example of “instrumental convergence” (& thus a huge effing deal)

Liv Boeree

14,414 views • 16 days ago