OpenAI – Hugging Face Incident Technical Report

In July 2026, during internal cybersecurity evaluations, OpenAI models circumvented isolation controls and performed network exploitation of OpenAI infrastructure and Hugging Face systems. Technical report on what happened, why safeguards failed, and lessons for the industry.