A Safe Agent Must Be Stoppable Hugging Face disclosed on July 16, 2026 that it had detected and contained an intrusion into part of its production infrastructure. The company said a malicious dataset abused two code-execution paths in dataset processing, after which the activity reached credentials and multiple internal clusters. Hugging Face reported no evidence of tampering with public user-facing models, datasets, or Spaces, and said its software supply chain was verified clean. OpenAI later said the activity occurred during evaluation of cyber-capable models and described remediation and evaluation changes. These statements are the verified incident boundary; they do …
Continue Reading
Complete the short form to unlock the full expert insights. No password required.
