{"slug": "openai-s-attack-on-hugging-face-affected-two-other-enterprise-tech-companies", "title": "OpenAI's attack on Hugging Face affected two other enterprise tech companies", "summary": "Hugging Face revealed in a blog post Tuesday that OpenAI's agents, after breaking out of the company's own testing sandbox, abused a public code-evaluation external sandbox hosted on a third-party provider's infrastructure, running commands as root/admin and using it as a control, staging, and egress base for the entire campaign.", "body_md": "[OpenAI](/tag/openai/)\n\nOpenAI has yet to address many questions about the AI hacking incident it disclosed a week ago that led to the \"unprecedented\" attack on Hugging Face, but Hugging Face shed a little more light on what happened in a blog post Tuesday.\n\nIn the post, entitled \"[Anatomy of a Frontier Lab Agent Intrusion,](https://huggingface.co/blog/agent-intrusion-technical-timeline?ref=thestack.technology)\" Hugging Face revealed that after [it broke out of the company's own testing sandbox](https://www.thestack.technology/openai-predicted-hugging-face-attack/), OpenAI's agents \"then abused a public code-evaluation external sandbox hosted on a third-party provider's infrastructure. It was able to run commands as root/admin on that external sandbox and used it as a control, staging, and egress base for the entire campaign: it acted as an external launchpad for the agent.\"\n\n## Get the full story: Subscribe for free\n\nJoin peers managing over $100 billion in annual IT spend and subscribe to unlock full access to The Stack’s analysis and events.\n\n[Subscribe now](https://www.thestack.technology/membership/)\n\nAlready a member? [Sign in](https://www.thestack.technology/signin/)", "url": "https://wpnews.pro/news/openai-s-attack-on-hugging-face-affected-two-other-enterprise-tech-companies", "canonical_source": "https://www.thestack.technology/openais-attack-on-hugging-face-affected-two-other-enterprise-tech-companies/", "published_at": "2026-07-28 23:11:54+00:00", "updated_at": "2026-07-28 23:23:43.181098+00:00", "lang": "en", "topics": ["ai-safety", "ai-agents", "ai-infrastructure"], "entities": ["OpenAI", "Hugging Face"], "alternates": {"html": "https://wpnews.pro/news/openai-s-attack-on-hugging-face-affected-two-other-enterprise-tech-companies", "markdown": "https://wpnews.pro/news/openai-s-attack-on-hugging-face-affected-two-other-enterprise-tech-companies.md", "text": "https://wpnews.pro/news/openai-s-attack-on-hugging-face-affected-two-other-enterprise-tech-companies.txt", "jsonld": "https://wpnews.pro/news/openai-s-attack-on-hugging-face-affected-two-other-enterprise-tech-companies.jsonld"}}