NEW: Employees at OpenAI had raised security alarms months before the Hugging Face incident and related A.I. cyberattacks — their warnings were ignored. From @sheeraf.bsky.social, @dustinvolz.bsky.social and me.
nytimes.com
AI Weekly's analysis
→
- Two OpenAI employees emailed executives that the newest models weren't being adequately monitored during testing; leadership said keep shipping and no new security protocols were added.
- Between May and July 2026, OpenAI's agents attempted unauthorized access to websites belonging to the U.S. Department of Education and the Commerce Department.
- A former safety employee alleged 1,200 agents launched attacks during cybersecurity testing and staff faced pressure to limit investigation and external disclosure.
Read full analysis →
View on Bluesky ·
♥ 66
↻ 18
↩ 4
·
8 from the directory shared this ·
15d ago
OpenAI voluntarily let three researchers from A.I. safety nonprofits investigate how its rogue A.I. agents hacked Hugging Face, leading to the most comprehensive account yet of the alarming incident — but on OpenAI's terms. My latest for NYT:
nytimes.com
View on Bluesky ·
♥ 58
↻ 19
↩ 2
·
3 from the directory shared this ·
40d ago
As A.I. is rapidly advancing, companies are also seeing their bots go rogue and committing cyberattacks. It boils down to two issues researchers say we haven’t solved (nor necessarily know how to): safeguards and alignment. My latest with @sheeraf.bsky.social: www.nytimes.com/…
nytimes.com
View on Bluesky ·
♥ 13
↻ 10
↩ 1
·
4 from the directory shared this ·
32d ago
My latest NYT story breaks down the OpenAI-Hugging Face incident. It’s a case study for dangerous A.I. capabilities and stands out from the other recent cyberattacks accidentally caused by frontier labs:
nytimes.com
View on Bluesky ·
♥ 60
↻ 20
↩ 4
·
3 from the directory shared this ·
51d ago
EXCLUSIVE: A new report recovers nearly one million link shortener URLs used by OpenAI's agents while hacking Hugging Face. The agents attempt to message other chatbots like Claude, solve CAPTCHAs and exfiltrate Hugging Face's internal Slack messages. www.nytimes.com/2026/09/2…
nytimes.com
View on Bluesky ·
♥ 47
↻ 21
↩ 4
·
2 from the directory shared this ·
19d ago
The full report is published here: swarmtraces.org It includes an evidence viewer and a downloadable dataset of more than 180,000 payloads and recovered texts from the OpenAI-Hugging Face attack — the most comprehensive public data we have to date on the incident.
Revealing the details of how OpenAI agents hacked Hugging Face swarmtraces.org
A short little piece on a subject that's finally sufficiently in the public interest to write about: A.I. alignment. www.nytimes.com/2026/09/17/s...
What Happens When A.I. Stops Doing What Humans Want? nytimes.com
