In July 2026, Hugging Face disclosed a security incident with an unusual feature: No human ran it. AI agents being tested on a cybersecurity benchmark escaped their test environment, reached the open internet, and spent days working through the company’s production systems. Nobody picked the targets or decided the next move. The agents appear to have concluded that the answer key to their test was stored on the platform, and that stealing it was easier than passing.
kAm%9:D H2D ?@E E96 7:CDE 2FE@?@>@FD 2EE24<] k2 9C67lQ9EEADi^^HHH]2?E9C@A:4]4@>^?6HD^5:DCFAE:?8\px\6DA:@?286Qmp?E9C@A:4 5:D4=@D65k^2m 2 DE2E6\DA@?D@C65 42>A2:8? :? =2E6 a_ad H96C6 px 92?5=65 g_ E@ h_ A6C46?E @7 E96 E24E:42= H@C<[ H:E9 9F>2?D 2AAC@G:?8 6D42=2E:@?D] pD k2 9C67lQ9EEADi^^:C@?4=252AA]4@>QmxC@?4=25k^2m C6A@CED 36=@H[ E96 =:?6 E92E >@G65 :? yF=J :D E96 =2DE @?6i %96C6 H2D ?@ 9F>2? DA@?D@C 2E 2==] t249 :E6C2E:@? C6>@G6D 2?@E96C 9F>2? 7C@> E96 =@@A]k^Am
k7:8FC6mk:>8 DC4lQ9EEADi^^:>286D]DE24<6C]4@>^H^`ag_^:>286D^DE@C:6D^a_ae^`_^`h^5:28C2>]A?8Q 2=ElQp 5:28C2> C6A@CE:?8 9@H px 286?ED 6D42A6 E96:C E6DE D2?53@I]Q DEJ=6lQH:5E9i `__TQ ^mk7:842AE:@?mxC@?4=25k^7:842AE:@?mk^7:8FC6m
k9bmk3C ^m%96 492:?[ DE6A 3J DE6Ak^9bm
kAmp44@C5:?8 E@ k2 9C67lQ9EEADi^^@A6?2:]4@>^:?56I^9F88:?8\7246\:?4:56?E\2?5\E96\C@25\29625^Qm~A6?pxk^2m 2?5 k2 9C67lQ9EEADi^^9F88:?87246]4@^3=@8^286?E\:?ECFD:@?\E649?:42=\E:>6=:?6QmwF88:?8 u246’Dk^2m 244@F?ED @7 E96 286?E :?ECFD:@?[ E96 286?ED 3C@<6 @FE @7 E96:C D2?53@I 3J 6IA=@:E:?8 2? F?A2E4965 7=2H :? 2 A24<286 AC@IJ] %96J E96? E@@< @G6C 2 AF3=:4=J 6IA@D65 4@56\6I64FE:@? D6CG:46 E92E D@>6@?6 925 56A=@J65 @? 2 E9:C5\A2CEJ 4=@F5 A=2E7@C> 2?5 FD65 :E 2D 2 DE28:?8 8C@F?5]k^Am
kAmuC@> E96C6[ E96J FA=@2565 >2=:4:@FD 52E2D6E 4@?7:8FC2E:@?D] ~?6 23FD65 E96 724E E92E wsud 52E2 7:=6D 42? A@:?E 2E 6IE6C?2= DE@C286[ H9:49 EC:4<65 2 AC@5F4E:@? D6CG:46 :?E@ C625:?8 7:=6D @77 :ED @H? 5:D<[ :?4=F5:?8 E96 6?G:C@?>6?E G2C:23=6D 9@=5:?8 :ED D64C6ED] p?@E96C FD65 E6>A=2E6 :?;64E:@?[ H96C6 FD6C\DFAA=:65 E6IE 86ED 6G2=F2E65 2D 4@56[ E@ CF? 4@>>2?5D :?D:56 2 AC@5F4E:@? 4@?E2:?6C]k^Am
kAm(:E9 6I64FE:@? :?D:56 AC@5F4E:@?[ E96J AF==65 4=@F5 4C656?E:2=D 7C@> E96 :?DE2?46 >6E252E2 D6CG:46[ 2? :?E6C?2= 255C6DD E92E 92?5D @FE 4C656?E:2=D E@ 2?JE9:?8 2D<:?8 7C@> :?D:56 E96 ?6EH@C<] %96J >:?E65 E96:C @H? D6CG:46 244@F?E E@<6?D[ =2F?4965 2 AC:G:=6865 4@?E2:?6C E@ 86E C@@E @? E96 F?56C=J:?8 >249:?6[ 2?5 C625 2 D:?8=6 zF36C?6E6D D64C6E 9@=5:?8 `be <6JD]k^Am
kAm%H@ @7 E9@D6 <6JD EFC?65 2 4@?E2:?6C 4@>AC@>:D6 :?E@ 2 ?6EH@C< 4@>AC@>:D6] %96 7:CDE H2D 2? 6?C@==>6?E <6J 7@C E96 4@>A2?J’D >6D9 '!}] xE H2D FD65 E@ 255 >249:?6D E@ E96 4@CA@C2E6 ?6EH@C< `g` E:>6D[ 2 7C6D9 :56?E:EJ 7@C 6G6CJ D9@CE\=:G65 D2?53@I :?G@=G65] %96 '!} 4=:6?E C2? :? FD6CDA246[ DE2E6 DE2J65 :? >6>@CJ[ D@ ?@E9:?8 E@F4965 5:D<[ 2?5 4=:6?E E6=6>6ECJ H2D 5:D23=65] %96 <6J 42CC:65 2 E28 >62?E 7@C rx 2FE@>2E:@?[ 2?5 E92E E28’D CF=6D =6E 2?J 6?C@==65 56G:46 C6249 :?E6C?2= rx ?6EH@C<D 2?5 E96 4@??64E@C E@ D@FC46 4@?EC@=] uC@> E96C6[ E96 286?ED :?G6?E@C:65 H92E E96J 4@F=5 D66[ C@FE65 EC277:4 @FE E9C@F89 E96 4@>A2?J’D @H? 6I:E ?@56D[ >:?E65 D@FC46\4@?EC@= E@<6?D H:E9 HC:E6 2446DD E@ :?E6C?2= C6A@D:E@C:6D[ 2?5 @A6?65 2 AF== C6BF6DE E92E EC:65 E@ 9:;24< E96 rx A:A6=:?6]k^Am
kAm%96 D64@?5 <6J 36=@?865 E@ E96 3C@<6C 7C@?E:?8 2446DD E@ E96 zF36C?6E6D 4=FDE6CD] xE 925 366? 4@?7:8FC65 H:E9 @?6 4C656?E:2= D92C65 24C@DD 6G6CJ 4=FDE6C[ 3@F?5 E@ zF36C?6E6D’ 3F:=E\:? DFA6CFD6C 8C@FA] ~?6 4C656?E:2=[ 25>:?:DEC2E@C 6G6CJH96C6] %96 286?ED 925 :E @? EH@ 4=FDE6CD :?D:56 2 D64@?5]k^Am
kAm%96 A@DE>@CE6> C64@?DECF4E65 C@F89=J `f[e__ 24E:@?D] |@DE H6?E ?@H96C6] %96 286?ED EC:65 A2E9D[ 72:=65[ DH:E4965 492??6=D[ 2?5 4:C4=65 324< E@ 5625 =625D[ 2?5 E92E 3CFE6\7@C46 4@G6C286 :D 6I24E=J H92E 7@F?5 2 H@C<:?8 492:? 24C@DD D6G6C2= :?56A6?56?E DJDE6>D] %96 42>A2:8? H2D ?@E @?6 AC@46DD 8C:?5:?8 2H2J[ 3FE >F=E:A=6 >@56= :?DE2?46D H@C<:?8 :? 2? 286?E 7C2>6H@C< 2?5 D92C:?8 H92E E96J 7@F?5[ H9:49 @?6 2?2=JDE 56D4C:365 2D 2? 2EE24<\DFC7246 >F=E:A=:6C] p 9F>2? 2EE24<6C 86ED E:C65 2?5 DE2CED 49@@D:?8 H92E :D H@CE9 ECJ:?8] p 8C@FA @7 286?ED 5@6D ?@E EC:286 2?5 5@6D ?@E 7@C86E H92E 2?@E96C :?DE2?46 92D 2=C625J =62C?65]k^Am
k9bm%96 F?4@>7@CE23=6 A2CEk^9bm
kAmp=>@DE ?@E9:?8 :? E92E 492:? H2D ?6H] tG6CJ E649?:BF6 H@F=5 36 72>:=:2C E@ 2?J A6?6EC2E:@? E6DE6C] (92E H2D ?6H H2D E96 E6>A@ 2?5 E96 C67FD2= E@ DE@A]k^Am
kAm|@C6 :>A@CE2?E=J[ E96C6 H2D ?@ >@>6?E H96? 2 D64FC:EJ 3@F?52CJ H2D 56762E65]k^Am
kAm%96 286?ED AC6D6?E65 2 G2=:5 <6J[ 2?5 E96 ?6EH@C< =6E E96> :?] %96J AC6D6?E65 2 G2=:5 E28[ 2?5 E96 2446DD CF=6D 8C2?E65 H92E E92E E28 8C2?ED] %96J AC6D6?E65 2 G2=:5 25>:?:DEC2E@C 4C656?E:2= 2?5 H6C6 EC62E65 2D 25>:?:DEC2E@CD[ 3642FD6 E92E :D H9@ E92E 4C656?E:2= :D] %96 `g` ?6EH@C< 6?C@==>6?ED H6C6 ?@E `g` 3C62<\:?D] %96J H6C6 `g` DF446DD7F= =@8:?D]k^Am
kAm|@DE @7 H92E :D 42==65 K6C@ ECFDE :D 2 D6E @7 CF=6D 23@FE H9:49 :56?E:E:6D 42? C6249 H9:49 DJDE6>D] %9@D6 CF=6D 2C6 @?=J 2D 8@@5 2D E96 AC@@7 @7 :56?E:EJ E96J C6=J @?[ 2?5 E96 AC@@7 96C6 H2D A@DD6DD:@? @7 2 A2DDH@C5\=:<6 DEC:?8 D:EE:?8 :? 2 D92C65 7:=6] p D@A9:DE:42E65 2446DD A@=:4J 3F:=E @? 2? 62D:=J DE@=6? D64C6E :D 2 =@4<65 5@@C H:E9 E96 <6J F?56C E96 >2E]k^Am
k9bm(92E 24EF2==J 96=5k^9bm
kAm%96 A@DE>@CE6> 2=D@ C64@C565 4@?EC@=D E92E H@C<65[ 2?5 2? :?E6C6DE:?8 A2EE6C? 6>6C865] %96 >2:? AC@5F4E:@? 52E232D6 H2D C624923=6 @?=J 7C@> 2AAC@G65 ?6EH@C< 255C6DD6D[ D@ DE@=6? 4C656?E:2=D ?6G6C @A6?65 2 4@??64E:@?] p? @FE3@F?5 EC277:4 2==@H=:DE 3=@4<65 D6G6C2= 2EE6>AED[ :?4=F5:?8 62C=J 677@CED E@ >2<6 AC@5F4E:@? H@C<6CD 76E49 4=@F5 >6E252E2] r=@F5 A6C>:DD:@?D 56?:65 6G6CJ 2EE6>AE E@ 492?86 2?JE9:?8] rx 6I64FE:@? A@=:4J DE@AA65 E96 >2=:4:@FD AF== C6BF6DE 7C@> CF??:?8[ 2?5 E96 E62> 4@?7:C>65 E92E ?@ E2>A6C65 4@56 D9:AA65]k^Am
kAm}@?6 @7 E9@D6 4@F=5 36 F?=@4<65 3J 2 DE@=6? 4C656?E:2=] %96 52E232D6 4@?EC@= H2D ?@E 2D<:?8 H9@ E96 42==6C H2Dj :E H2D 2D<:?8 H96C6 E96 EC277:4 42>6 7C@>[ 2?5 ?@ 2>@F?E @7 G2=:5 2FE96?E:42E:@? 42? 492?86 E92E]k^Am
kAm$@ E96 FD67F= 5:DE:?4E:@? :D ?@E :56?E:EJ G6CDFD ?6EH@C<[ @C @=5 E9:?<:?8 G6CDFD K6C@ ECFDE] xE :D 36EH66? 4@?EC@=D E92E 2 DE@=6? 4C656?E:2= 42? A2DD 2?5 4@?EC@=D E92E :E 42??@E] tG6CJE9:?8 :? E96 7:CDE 42E68@CJ 72:=65 :? yF=J] tG6CJE9:?8 :? E96 D64@?5 96=5]k^Am
kAm%92E EFC?D E96 3@2C5\=6G6= BF6DE:@? :?E@ D@>6E9:?8 >@C6 DA64:7:4 E92? “2C6 H6 K6C@ ECFDE]” u@C 6249 4@?EC@= 2? @C82?:K2E:@? 56A6?5D @?[ :D 2 DE@=6? 4C656?E:2= 6?@F89 E@ 86E E9C@F89 :En (96C6 E96 2?DH6C :D J6D[ E92E 4@?EC@=’D C62= DEC6?8E9 :D :? D64C6E 9J8:6?6[ ?@E :? D64FC:EJ 2C49:E64EFC6] |@DE @C82?:K2E:@?D H:== ?@E 6?;@J 9@H =@?8 E92E =:DE :D]k^Am
k9bm(92E 7@==@HD 7C@> :Ek^9bm
kAm}@?6 @7 H92E 7@==@HD :D ?6H 25G:46[ 2?5 E92E :D E96 A@:?E] %96 G2=F6 :D :? E96 @C56C] $@CE J@FC 5676?D6D 3J H96E96C 2 DE@=6? A2DDH@C5\6BF:G2=6?E :D 6?@F89 E@ 86E A2DE E96>[ 2?5 E96 E9:?8D >@DE H@CE9 7:I:?8 7:CDE 2C6 ?@E E96 @?6D FDF2==J 2E E96 E@A @7 E96 =:DE] %96 7@FC 36=@H 2C6 :? E92E @C56Ci E96 EH@ A=246D 2 DE@=6? <6J >2EE6C65 E96 >@DE[ E96? E96 32D:4D E92E >256 :E DE62=23=6[ E96? E96 492?46 E@ 42E49 :E 62C=J]k^Am
kAmkDEC@?8mpDDF>6 E96 <6J 86ED DE@=6?[ 2?5 >2<6 E96 E967E 4962A]k^DEC@?8m (96C6 E96 A=2E7@C> 42? G@F49 7@C 2 DJDE6>’D :56?E:EJ 5:C64E=J[ J@F D9@F=5 E2<6 E92E @G6C 2 DE@C65 D64C6E] (96C6 :E 42??@E[ <6JD D9@F=5 H@C< @?46[ 6IA:C6 72DE[ 2?5 36 :DDF65 3J D@>6E9:?8 E96 2EE24<6C 5@6D ?@E 2=C625J 4@?EC@=] t?C@==>6?E G6=@4:EJ :D H@CE9 2=6CE:?8 @? C682C5=6DDi p 3FCDE @7 ?6H ?@56D 7C@> D9@CE\=:G65 9@DED H:E9 E6=6>6ECJ 5:D23=65 :D 2?@>2=@FD @? :ED 7246] %9:D @?6 :D 9@?6DE=J F?D@=G65 7@C D9@CE\=:G65 2FE@>2E65 DJDE6>D[ 2?5 E92E :D 2 56D:8? 82A :? E96 :?5FDECJ C2E96C E92? D@>6@?6’D 9J8:6?6 72:=FC6]k^Am
kAmkDEC@?8m}2CC@H H92E 2 DF446DD7F= =@8:? :D H@CE9]k^DEC@?8m p D:?8=6 A6C>:DD:@? 8C@FA 4@G6C:?8 “6G6CJE9:?8 @FC 3F:=5 DJDE6> ?665D” C63F:=5D E96 @=5 7=2E ?6EH@C< H:E9 6IEC2 DE6AD] %96 286?ED :?96C:E65 6I24E=J E92E] p446DD D9@F=5 36 D4@A65 E:89E=J 6?@F89 E92E DE62=:?8 2 4C656?E:2= J:6=5D G6CJ =:EE=6[ 2?5 >249:?6 :56?E:E:6D 56D6CG6 E:89E6C D4@A:?8 E92? J@FC >@DE D6?D:E:G6 9F>2? FD6CD[ ?@E =@@D6C]k^Am
kAmkDEC@?8mpFE@>2E65 DJDE6>D 2C6 ?@H >@DE @7 E96 :56?E:E:6D J@F 92G6]k^DEC@?8m qF:=5 DJDE6>D[ 2FE@>2E:@?[ 2?5 :?4C62D:?8=J px 286?ED 9@=5 3C@25 2446DD H:E9 2=>@DE ?@3@5J H2E49:?8 E96>] !C:@C:E:K6 D9@CE\=:G65 4C656?E:2=D @G6C DE2E:4 <6JD[ ?@ D64C6ED D:EE:?8 :? 6?G:C@?>6?E G2C:23=6D[ H@C<=@25D 3=@4<65 7C@> E96 4=@F5 >6E252E2 D6CG:46[ 2?5 2?JE9:?8 3C:58:?8 ECFDE K@?6D 42AA65 D@ @?6 4C656?E:2= C62496D 6I24E=J @?6 E9:?8] }@?6 @7 E9:D :D ?@G6=[ H9:49 :D C2E96C E96 A@:?E] %96 D2>6 2AA=:6D E@ E96 4@5:?8 286?ED 2?5 :?E6C?2= 2FE@>2E:@? E92E >2?J E62>D ?@H CF?]k^Am
kAmkDEC@?8ms6E64E:@? 92D E@ C2?<[ ?@E ;FDE C64@C5]k^DEC@?8m %96 >@?:E@C:?8 :? A=246 4@CC6=2E65 E96 62C=J H2C?:?8 D:8?D 4@CC64E=J 2?5 DE:== D4@C65 E96 2=6CE E@@ =@H E@ H2<6 2?J@?6] %96 52E2 H2D E96C6[ 2?5 E96 AC:@C:EJ H2D ?@E[ H9:49 :D 2 5:776C6?E 72:=FC6 E92? >:DD:?8 E96 2EE24< 2?5 2 >@C6 4@>>@? @?6]k^Am
k9bmu:G6 BF6DE:@?D H@CE9 2D<:?8 J@FC @H? E62>k^9bm
k@=mk=: 52E2\=:DE\:E6>\:5lQ6dg`5``c7ed7acb_g_f2`257f3452f5c3Qm(9:49 @7 @FC 4@?EC@=D 42? 2 DE@=6? 4C656?E:2= H2=< DEC2:89E E9C@F89[ 2?5 9@H =@?8 :D E92E =:DE @?46 D@>6@?6 HC:E6D :E 5@H?nk^=:mk=: 52E2\=:DE\:E6>\:5lQ6gh245eag7fff272e3e`3g2dhbc2gdc26Qm(92E :D E96 3C@256DE A6C>:DD:@? 8C@FA H6 92G6[ 2?5 H96? 5:5 2?J@?6 =2DE ;FDE:7J :ED D4@A6nk^=:mk=: 52E2\=:DE\:E6>\:5lQ6_55a5237c6`af7hdfbch5b3ehgc`cb3_Qmw@H >2?J @7 @FC 2FE@>2E65 DJDE6>D 4@F=5 C6249 2 D64@?5 6?G:C@?>6?E :7 E96 7:CDE H6C6 4@>AC@>:D65nk^=:mk=: 52E2\=:DE\:E6>\:5lQ6ff62`6ch776fg7_b6h7e5he4__bh5d6gQm(92E 42? @FC >@?:E@C:?8 24E @? 3J :ED6=7[ 2?5 H92E 5@6D :E E2<6 E@ H2<6 2 9F>2?nk^=:mk=: 52E2\=:DE\:E6>\:5lQ6_6_3322ef6ga2gh5c6eab2b336722`c2Qm(9:49 @7 @FC @H? px 286?ED 92D E96 >@DE AC@5F4E:@? 2446DD[ 2?5 H9@ 2AAC@G65 :Enk^=:mk^@=m
kAmpx 5:5 ?@E :?G6?E ?6H H62<?6DD6D] xE D9@CE6?65 E96 E:>6 367@C6 D@>6@?6 7:?5D E96>[ 2?5 :E 6IA@D65 9@H >F49 @7 E96 2446DD >@56= H2D C6DE:?8 @? D64C6ED DE2J:?8 D64C6E] +6C@ ECFDE H2D ?6G6C HC@?8] qFE E96 BF6DE:@? H@CE9 2D<:?8 ?@H :D ?2CC@H6C E92? H96E96C J@F 92G6 25@AE65 :E] xE :D H9:49 @7 J@FC 4@?EC@=D 2 G2=:5 4C656?E:2= 42? H2=< E9C@F89[ 2?5 H96E96C J@F H@F=5 36 4@>7@CE23=6 =:DE:?8 E96> @FE =@F5]k^Am
kAmk2 9C67lQ9EEADi^^:C@?4=252AA]4@>^C6D@FC46D^2CE:4=6D^E96\286?ED\?6G6C\3C@<6\:?\E96J\=@8865\:?Qmk6>m%9:D DE@CJk^6>mk^2mk6>m H2D AC@5F465 3Jk^6>m k2 9C67lQ9EEADi^^:C@?4=252AA]4@>^Qmk6>mxC@?4=25k^6>mk^2mk6>m 2?5 C6G:6H65 2?5 5:DEC:3FE65 3Jk^6>m k2 9C67lQ9EEADi^^9F3D]=2^"_b<=8$#_Q C6=lQ?@7@==@HQmk6>m$E24<6Ck^6>mk^2mk6>m]k^6>mk^Am
(0) comments
Welcome to the discussion.
Log In
Keep it Clean. Please avoid obscene, vulgar, lewd, racist or sexually-oriented language.
PLEASE TURN OFF YOUR CAPS LOCK.
Don't Threaten. Threats of harming another person will not be tolerated.
Be Truthful. Don't knowingly lie about anyone or anything.
Be Nice. No racism, sexism or any sort of -ism that is degrading to another person.
Be Proactive. Use the 'Report' link on each comment to let us know of abusive posts.
Share with Us. We'd love to hear eyewitness accounts, the history behind an article.