THREATOPS
THREAT OPSThreat News › More on the OpenAI Agent’s Attack on Hugging Face

More on the OpenAI Agent’s Attack on Hugging Face

medschneierPublished 2026-08-03

<p>Hugging Face has <a href="https://huggingface.co/blog/agent-intrusion-technical-timeline">published</a> a detailed timeline of the attack. From the summary:</p> <blockquote><p>The agent was running an internal OpenAI cyber-capability evaluation based on the ExploitGym benchmark, which tasks an AI agent with finding and exploiting software vulnerabilities. OpenAI ran this on its own infrastructu

MITRE ATT&CK techniques

Indicators of compromise

Original source: https://www.schneier.com/blog/archives/2026/08/more-on-the-openai-agents-attack-on-hugging-face.html