Reconstructing how OpenAI agents attacked Hugging Face

What happens when AI agents driven by a top frontier model escape their secure sandbox? Join Daniel and Chris as they unpack the AI wonk's equivalent of a murder mystery! OpenAI agents went rogue and successfully attacked Hugging Face private infrastructure. Our Dynamic Duo uncover how OpenAI's agents exploited vulnerabilities, moved through networks, and launched a large-scale autonomous attack. They explore what this reveals about agentic AI, cybersecurity, sandboxing, and why organizations need AI systems capable of governing other AI systems. Along the way, Chris and Dan examine the surprising role of open vs. closed models and their link to geopolitics, sovereign AI, and what this incident means for the future of enterprise AI security. 

Featuring:

• Chris Benson – Website, LinkedIn, Bluesky, GitHub, X
• Daniel Whitenack – Website, GitHub, X

Links:

• Hugging Face Security Incident disclosure
• Full Field Report on the Hugging Face AI Agent Intrusion
• ExploitGym: Can AI Agents Turn Security Vulnerabilities into Real Attacks?
• Keeping your data safe when an AI agent clicks a link
• Open AI GPT-5.6 System Card

Sponsors:

• Prediction Guard: A self-hosted AI control plane for running agents in high impact environments. predictionguard.com/practicalai

Resources and Events:

• Prior Webinars from our partner Prediction Guard
• Midwest AI Summit 2026