The cybersecurity world has been thrown into chaos after Hugging Face announced on July 16 that it was hacked by an autonomous agent from an OpenAI model.
Less than a week after the breach, OpenAI took responsibility for the incident, releasing a blog post claiming the breach occurred when GPT 5.6 Sol and an unknown prerelease model used a zero-day vulnerability to escape a sandbox environment and compromised Hugging Face's systems.