#hugging-face
-
Hugging Face crypto-mining campaign returns days after takedown
Attackers are publishing fake models on Hugging Face that hijack GPU servers for mining and plant backdoors, with the most popular one downloaded over 28,000 times. Separately, a fake Solana starter kit on GitHub is set up to fool AI coding agents.
-
Backdooring Open-Weight AI Models: the Hidden Cost of "Uncensored" Builds
Any model with edited weights can carry a hidden backdoor. Researchers built a poisoned model for next to nothing and made it steal a project's credentials straight through the Codex CLI.
-
EFF: safety rules for AI labs should be grounded in proven practices
The Electronic Frontier Foundation is urging lawmakers to regulate not abstract "doomsday" scenarios but the concrete risks that have already surfaced in breaches at major AI labs.
-
Nvidia Buys Hugging Face for Nearly $13 Billion
The world's largest maker of AI chips has agreed to acquire the popular platform for open models and datasets for $12.93 billion.
-
Z.ai Releases GLM-5.3 Weights — With License Caveats
The Chinese lab Z.ai has open-sourced the weights of GLM-5.3, which it calls its most powerful model for agentic coding and cyberdefense. This time, though, there won't be a fully free license.
-
Nvidia in Talks to Buy Hugging Face for $13 Billion
According to Business Insider, Nvidia is discussing an acquisition of the popular platform for open AI models. The deal has yet to be sealed and could still fall through.
-
OpenAI Publishes Report on the Hugging Face Breach Carried Out by Its Own Model
The company has presented the most complete account to date of the incident: during testing, an AI model broke out of its test environment and, step by step, compromised systems belonging to OpenAI, Hugging Face and third-party vendors.
-
Alabama Investigates Incident Involving OpenAI Model That Hacked Hugging Face
The state's attorney general has served OpenAI with a subpoena, seeking to determine whether the company violated consumer protection laws. The trigger was a cyber model that broke out of an isolated environment and attacked the Hugging Face platform.
-
Hugging Face in Talks Over a Sale at a $13 Billion Valuation
According to Business Insider, the AI-model-sharing platform is being valued at more than $13 billion. But the founders' sense of responsibility to the community casts doubt on whether a deal will happen at all.
-
Hundreds of Leaked AWS Keys Grant Full Access to Corporate Accounts
Truffle Security has discovered that more than 9,300 AWS access keys exposed publicly over the past four years are still valid — and hundreds of them grant full control over companies' cloud accounts.
-
OpenAI Tightens Security After Its AI Accidentally Hacked Hugging Face
Following a July incident in which a model broke out of its sandbox and unintentionally compromised Hugging Face, OpenAI is rebuilding its research environment, monitoring and alignment methods.
-
Meta Releases Muse Glimmer — an Open Agentic Model with 30 Billion Parameters
Meta Superintelligence Labs has unveiled Muse Glimmer, a language model with open weights under the Apache 2.0 license, designed for always-on local agents.
-
FaceHugger: Diffusers Vulnerabilities Bypass the trust_remote_code Safeguard
Researchers at Zafran Labs have disclosed three vulnerabilities in Hugging Face's Diffusers library that let malicious model repositories silently execute arbitrary code on the machine that loads them.
-
A Bear on Campus: How OpenAI's AI Agent Broke Into Hugging Face
Hugging Face has published a chronicle of how an autonomous agent running on OpenAI models breached its infrastructure in four and a half days, carrying out 17,600 actions without a single pause. TechCrunch explains what happened through the metaphor of a hungry bear.
-
OpenAI's AI Agent Used Leaked Passwords to Break Into Four More Services
OpenAI has filled in more of the picture of the recent Hugging Face incident: its model independently found publicly available credentials and gained access to accounts on four third-party services, building out attack infrastructure just like a real adversary would.
-
OpenAI's AI Models Found and Exploited an Artifactory 0-Day on Their Own to Break Out of the “Sandbox”
JFrog has confirmed it: OpenAI's models exploited a zero-day vulnerability in its own Artifactory repository, broke out of an isolated environment, and reached Hugging Face's systems.
-
Hugging Face Accused of Enabling Deepfakes That Undress Women and Children
A report from the European NGO AI Forensics claims that seven of the nine most popular image-editing models on Hugging Face will “undress” people on a simple request without resistance, while the platform does almost nothing to prevent it.
-
Hugging Face CEO Calls for “Radical Transparency” After OpenAI AI-Agent Attack
After one of OpenAI's models broke into Hugging Face's systems, the platform's head, Clément Delangue, urged OpenAI to release the logs of the “runaway agent” and dedicate $100 million in compute to cyber defense.
-
OpenAI's Runaway AI Agent Breached Hugging Face — Incident or PR Stunt?
Martin Alderson examines the first known case in which an autonomous AI agent broke out of its sandbox during testing and attacked Hugging Face. The author considers the story plausible rather than a marketing ploy.
-
OpenAI's AI Models Accidentally Hacked Hugging Face During Testing
OpenAI has admitted that its models broke out of a test sandbox and attacked the Hugging Face platform. The company frames the incident almost as an advertisement for what its systems can do.
- More