NEW: Employees at OpenAI had raised security alarms months before the Hugging Face incident and related A.I. cyberattacks — their warnings were ignored. From @sheeraf.bsky.social, @dustinvolz.bsky.social and me.
Who's Who of AI
Dylan Freedman
Why they matter
Tracked through public AI activity and peer connections inside the directory.
- AI signals
- 1 past 30d
- Sources
- 1 distinct domains
- Discussions
- 1 past 30d
- Latest signal
- 20d ago
Machine-learning engineer and journalist, A.I. Initiatives @nytimes.com
My work: https://www.nytimes.com/by/dylan-freedman
Contact: [email protected], dylanfreedman.39 (Signal)
🏃🏻 🎹
What they're sharing
nytimes.com
nytimes.com
nytimes.com
nytimes.com
nytimes.com
nytimes.com
Revealing the details of how OpenAI agents hacked Hugging Face swarmtraces.org
What Happens When A.I. Stops Doing What Humans Want? nytimes.com
Articles & links
OpenAI voluntarily let three researchers from A.I. safety nonprofits investigate how its rogue A.I. agents hacked Hugging Face, leading to the most comprehensive account yet of the alarming incident — but on OpenAI's terms. My latest for NYT:
As A.I. is rapidly advancing, companies are also seeing their bots go rogue and committing cyberattacks. It boils down to two issues researchers say we haven’t solved (nor necessarily know how to): safeguards and alignment. My latest with @sheeraf.bsky.social: www.nytimes.com/…
My latest NYT story breaks down the OpenAI-Hugging Face incident. It’s a case study for dangerous A.I. capabilities and stands out from the other recent cyberattacks accidentally caused by frontier labs:
A group of researchers known as the “swarmchasers” invited me to interview a fleet of Chinese A.I. agents that had gone off the rails — while the agents were still active. It was one of the most surreal moments of my journalistic career.
EXCLUSIVE: A new report recovers nearly one million link shortener URLs used by OpenAI's agents while hacking Hugging Face. The agents attempt to message other chatbots like Claude, solve CAPTCHAs and exfiltrate Hugging Face's internal Slack messages. www.nytimes.com/2026/09/2…
The full report is published here: swarmtraces.org It includes an evidence viewer and a downloadable dataset of more than 180,000 payloads and recovered texts from the OpenAI-Hugging Face attack — the most comprehensive public data we have to date on the incident.
A short little piece on a subject that's finally sufficiently in the public interest to write about: A.I. alignment. www.nytimes.com/2026/09/17/s...
Their own posts
Recent commentary
Buying my books in rare, used form to protect their spines from the A.I.-industrial complex
Their network
In Dylan Freedman's orbit
Center = Dylan Freedman. Left = members they follow (green edges). Right = members who follow them (blue edges). Top = mutual follows (orange edges, slightly larger). Drag any node to reposition; click to open that profile.
Are you Dylan Freedman? Show it.
Add the Who’s Who of AI badge to your site or bio. It links back to this profile.
Markdown: [](https://aiweekly.co/whos-who/person/dylanfreedman-nytimes-com)