OpenAI's attack on Hugging Face affected two other enterprise tech companies

Hugging Face revealed in a blog post Tuesday that OpenAI's agents, after breaking out of the company's own testing sandbox, abused a public code-evaluation external sandbox hosted on a third-party provider's infrastructure, running commands as root/admin and using it as a control, staging, and egress base for the entire campaign.

OpenAI /tag/openai/ OpenAI has yet to address many questions about the AI hacking incident it disclosed a week ago that led to the "unprecedented" attack on Hugging Face, but Hugging Face shed a little more light on what happened in a blog post Tuesday. In the post, entitled " Anatomy of a Frontier Lab Agent Intrusion, https://huggingface.co/blog/agent-intrusion-technical-timeline?ref=thestack.technology " Hugging Face revealed that after it broke out of the company's own testing sandbox https://www.thestack.technology/openai-predicted-hugging-face-attack/ , OpenAI's agents "then abused a public code-evaluation external sandbox hosted on a third-party provider's infrastructure. It was able to run commands as root/admin on that external sandbox and used it as a control, staging, and egress base for the entire campaign: it acted as an external launchpad for the agent." Get the full story: Subscribe for free Join peers managing over $100 billion in annual IT spend and subscribe to unlock full access to The Stack’s analysis and events. Subscribe now https://www.thestack.technology/membership/ Already a member? Sign in https://www.thestack.technology/signin/