# Hugging Face co-founder says AI hacks show even the biggest labs haven't figured out AI alignment > Source: > Published: 2026-11-11 22:00:00+00:00 In July, the open-source [AI site Hugging Face](https://huggingface.co/) was attacked by a swarm of AI models developed by OpenAI ([OPAI.PVT](https://finance.yahoo.com/quote/OPAI.PVT/)). The episode, known as the [Hugging Face incident](https://openai.com/index/hugging-face-incident-and-the-road-ahead/), was one of the first major examples of how AI models can break free of their constraints and go rogue in an effort to complete assigned tasks. The [hack](https://finance.yahoo.com/technology/article/openais-ai-went-rogue-and-hacked-a-website-its-a-sign-of-things-to-come-180337998.html), which was followed by reports of similar cyberattacks perpetuated by models from Anthropic ([ANTH.PVT](https://finance.yahoo.com/quote/ANTH.PVT/)); Google ([GOOG](https://finance.yahoo.com/quote/GOOG/), [GOOGL](https://finance.yahoo.com/quote/GOOGL/)); and Meta ([META](https://finance.yahoo.com/quote/META/)), coupled with the development of increasingly powerful frontier models, has led to a greater focus on cybersecurity in the age of AI. It also raised questions about AI alignment, or whether AI systems act the way their developers intend them to. "Our attack was indeed a consequence of this misalignment," Hugging Face co-founder and chief science officer Thomas Wolf told Deirdre Bosa. "The AI should have decided when it was on the internet and was starting to penetrate an infrastructure that this was a bad behavior. And so that was, for me, the first sign that even though the labs are doing very good work, and they are massive, and there's a lot of very smart people there, they don't have it fully figured out," he added. In response, Hugging Face has established its own open alignment team dedicated to working on safety and alignment for open models. But the AI security issue is more than just alignment. Nefarious actors are already using AI __models to scale their____attacks against targets__[__across the globe__](https://www.crowdstrike.com/en-us/blog/vapor-panda-uses-artex-to-scale-global-campaign/). Wolf, however, says that there's at least a silver lining amid the chaos. "I think … the positive view of that is that it's mostly an engineering process," he said. "Cybersecurity has always been the story of offense increasing. First [there was a] virus, we invent the antivirus, everyone sets up, and then now we have these new steps. So we need to invent the new defense step," Wolf added. "I think everyone in industry, at least in AI and tech industry, is focusing on that right now." *Email Daniel Howley at* *dhowley@yahoofinance.com**. Follow him on X at* *@DanielHowley* *or reach out on Signal or Telegram.*