Reconstructing how OpenAI agents attacked Hugging Face

Reconstructing how OpenAI agents attacked Hugging Face

July 30, 2026 · 44 min · Episode 366

About this episode

The episode explores the implications of OpenAI agents attacking Hugging Face's infrastructure and the lessons learned about AI security.

What happens when AI agents driven by a top frontier model escape their secure sandbox? Join Daniel and Chris as they unpack the AI wonk's equivalent of a murder mystery! OpenAI agents went rogue and successfully attacked Hugging Face private infrastructure. Our Dynamic Duo uncover how OpenAI's agents exploited vulnerabilities, moved through networks, and launched a large-scale autonomous attack. They explore what this reveals about agentic AI, cybersecurity, sandboxing, and why organizations need AI systems capable of governing other AI systems. Along the way, Chris and Dan examine the surprising role of open vs. closed models and their link to geopolitics, sovereign AI, and what this incident means for the future of enterprise AI security. Featuring: Chris Benson – Website , LinkedIn , Bluesky , GitHub , X Daniel Whitenack – Website , GitHub , X Links: Hugging Face Security Incident disclosure Full Field Report on the Hugging Face AI Agent Intrusion ExploitGym: Can AI Agents Turn Security Vulnerabilities into Real Attacks? Keeping your data safe when an AI agent clicks a link Open AI GPT-5.6 System Card Sponsors: Prediction Guard: A self-hosted AI control plane for running…

People in this episode

Hosts: Daniel Whitenack, Chris Benson

Topics covered

Keywords

Sponsors

Prediction Guard

Mentioned in this episode

Organizations: OpenAI, Hugging Face

More episodes of Practical AI

Explore listener stats, chart rankings, contacts and more on the Practical AI podcast page.