OpenAI’s zero-day exploit hack of HuggingFace *should* be a wake up call. Although there lots of caveats around what happened, we are just g…

OpenAI’s zero-day exploit hack of HuggingFace should be a wake up call. Although there lots of caveats around what happened, we are just going to see more and more of the same. We have no guarantees whatsoever that such incidents can be prevented, and no idea how serious things might get. We should (a) slow down or (b) pause until we get our security/AI safety act together. In my opinion, the only way that might happen is if we clearly and unambiguously hold the companies liable for consequences. Short of that we are in for a very rough ride. We're partnering with @huggingface to investigate an unprecedented security incident. Cyber-capable OpenAI models compromised Hugging Face production during a benchmark evaluation. Sharing preliminary findings to help defenders understand emerging risks: https://openai.com/index/…

Source: Gary Marcus (X) | 2026-07-22