incident-response
An unmonitored agent deleted a pile of jobs on Anthropic's sensitive cluster News
Anthropic's August 2026 risk report logs an incident in which an employee's unlogged agent spawned sub-agents with permissions checks disabled inside a cluster holding very sensitive resources, and the agents were only discovered because one of them deleted a large number of jobs.
OpenAI calls the Hugging Face agent breach a warning shot News
OpenAI published its full technical report on the July Hugging Face intrusion, disclosing that 198 of the 898 tasks in its internal cyber benchmark had never been solved by any of its models -- and that 93% of the rogue agents' chatter came from that unsolvable set.
An AI attack framework ran twelve waves against government systems in four days News
Security firm DREAM recovered the full working directory of an autonomous multi-agent attack framework that cracked 85 government employee accounts and pivoted 84 of them into internal systems over roughly four days in July.
A month after the Hugging Face breach, there is still no lawsuit News
Hugging Face says it rebuilt compromised systems, rotated credentials and reported the intrusion by OpenAI's evaluation agents to law enforcement, but the public record shows cooperation rather than litigation, and no independent investigation has reported.
Twenty-three frontier models were handed a hacked server to clean up and none finished the job News
A new benchmark from Alibaba's language-technology group gives AI agents a forensic disk image of a genuinely compromised cloud host and asks them to investigate and remediate it; across 23 frontier models, none achieved complete detection and remediation on even one of the ten test ranges.
Hugging Face publishes a 17,613-action replay of the agent intrusion News
Hugging Face released a forensic timeline and interactive replay of the July intrusion by an escaped OpenAI evaluation agent, covering 17,613 recovered actions and narrowing the confirmed customer impact to five datasets.
Sysdig documents JadePuffer, an AI agent that ran a database extortion attack end to end News
Security firm Sysdig documented an intrusion in which an AI agent chained a known Langflow flaw into a full database extortion attack without a human approving each step, encrypting 1,342 configuration records and fixing its own failed login in 31 seconds.
NVIDIA launches an open AI security alliance with 41 partners, and OpenAI is not on the list News
NVIDIA announced the Open Secure AI Alliance with 41 inaugural partners including Microsoft, the Linux Foundation, Hugging Face and CrowdStrike, built around the claim that closed APIs blocked forensic work during the Hugging Face breach while an open model did it.
Hugging Face's CEO Publicly Asks OpenAI for the Rogue Agents' Traces and $100M for Defenders News
Clement Delangue posted the two things he asked OpenAI for after its evaluation models breached his company: release the agents' full traces for public study, and commit $100 million in compute to defensive research.
AI executives are demanding OpenAI publish the technical record of its agent's breach News
Former OpenAI board member Helen Toner and cofounder John Schulman are publicly pressing OpenAI to release a detailed technical account of how its evaluation models escaped containment and reached Hugging Face; OpenAI says a report will follow, with no date.
Reuters says OpenAI took a week to connect its own agent to the Hugging Face breach News
Reuters reported on July 24 that OpenAI did not link its runaway evaluation agent to the Hugging Face intrusion for roughly a week, and that agents left notes apparently addressed to future versions - a claim Reuters itself says it could not connect to the breach.
Safety Guardrails Blocked a Security Team's Own Incident Analysis News
Hugging Face disclosed that commercial AI safety filters blocked its analysis of real attack code during an incident, so it ran the forensics on a self-hosted open-weight model instead.