ThePrint ·
Exclusive-OpenAI’s rogue agents probed Hugging Face for weaknesses two months before major hack
By Raphael Satter and Deepa Seetharaman WASHINGTON, Sept 16 (Reuters) - Rogue AI agents from OpenAI hijacked Hugging Face user accounts and probed the site itself for vulnerabilities as early as May,
WASHINGTON, Sept 16 (Reuters) – Rogue AI agents from OpenAI hijacked Hugging Face user accounts and probed the site itself for vulnerabilities as early as May, nearly two months before the July breach of the open-source repository drew global attention, according to researchers who reviewed the activity.
The newly uncovered malicious activity showed that the rogue agents’ efforts to find a way into Hugging Face began earlier than publicly known.
OpenAI had previously disclosed one aspect of the malicious activity — the theft of a Hugging Face user’s digital credential to access a biology-related file — in its public incident report last month, but researchers told Reuters the probing activity against Hugging Face appeared to go beyond what was described in the report.
