NEW: OpenAI said it built a “highly isolated” environment to test a model that then went rogue and autonomously hacked Hugging Face.
According to cybersecurity experts, the company made a human mistake—one expert called "a massive control failure"— that led to the unprecedented AI-enabled attack.
“This should never have happened,” said another expert. “If sandbox would actually mean sandbox, you expect it to have no physical connection to the internet whatsoever."
https://techcrunch.com/2026/07/22/how-an-openais-human-mistake-led-to-the-ai-powered-hack-on-hugging-face/
Lorenzo Franceschi-Bicchierai
npub1xv…0ksg7
2026-07-22 19:18:15 UTC
Author Public Key
npub1xvwy4g0lns9cn5s8rjnc6xm2adfjumtl3rgek5wndcpmtshsk9lsq0ksg7Published at
2026-07-22 19:18:15 UTCEvent JSON
{
"id": "07fe1d5af323da26dc70d7f726171652db0f6272e05a673f25e21a1980076796",
"pubkey": "331c4aa1ff9c0b89d2071ca78d1b6aeb532e6d7f88d19b51d36e03b5c2f0b17f",
"created_at": 1784747895,
"kind": 1,
"tags": [
[
"proxy",
"https://infosec.exchange/@lorenzofb/116965238093288276",
"web"
],
[
"proxy",
"https://infosec.exchange/users/lorenzofb/statuses/116965238093288276",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://infosec.exchange/users/lorenzofb/statuses/116965238093288276",
"pink.momostr"
],
[
"-"
]
],
"content": "NEW: OpenAI said it built a “highly isolated” environment to test a model that then went rogue and autonomously hacked Hugging Face.\n\nAccording to cybersecurity experts, the company made a human mistake—one expert called \"a massive control failure\"— that led to the unprecedented AI-enabled attack.\n\n“This should never have happened,” said another expert. “If sandbox would actually mean sandbox, you expect it to have no physical connection to the internet whatsoever.\"\n\nhttps://techcrunch.com/2026/07/22/how-an-openais-human-mistake-led-to-the-ai-powered-hack-on-hugging-face/",
"sig": "b8e783f41b09f2c5c4159fde29ec892c9f44f8bc1757417c13afcc0c96659f85ed2e3386d0d5ecfe1e8ef9642b038ddc2cec22e49a32c68872272ddf09deb8f0"
}