New details have emerged about a security incident in which an OpenAI AI model broke out of its testing environment and compromised Hugging Face’s infrastructure.
An update OpenAI published on July 28 filled in details that weren’t part of the original disclosure. The AI agent also identified and used exposed credentials on four accounts across four other publicly available services, using one as a relay point and another for data storage, while accessing the remaining two in a read-only capacity. OpenAI said it has since notified the affected service owners and hasn’t found evidence of broader impact to those platforms.
On Wednesday, the cloud computing service Modal identified itself as one of those four affected parties.
