A Thousand Agents Walk Into Hugging Face

(Presented by TLPBLACK: A cybersecurity intelligence platform focused on sharing curated, high-sensitivity threat insights and research with trusted security professionals.) Three Buddy Problem - Episode 111: OpenAI finally published a technical Hugging Face post-mortem, and Costin's verdict is blunt. He reads it as a document written for policymakers rather than for the blue teams who have to survive a thousand-agent swarm. We also dig into NVIDIA's $12.9 billion acquisition of Hugging Face, why JAGS thinks a frontier lab standing against open-source looks weak, and what that new industry open letter on cyber defense actually asks anyone to do. Plus, hotel Wi-Fi tradecraft after CaptiveCrunch, the FBI's ORB network takedown with Lumen, Chinese routers that ship backdoored from the factory, and the TeamPCP arrests in Australia. Cast: Juan Andres Guerrero-Saade, Ryan Naraine and Costin Raiu. Timestamps: 0:00 Introductory banter 1:11 TLPBlack, incident response, and why it starts at the router 4:11 CaptiveCrunch and Juanito's travel router kit 7:59 Costin's VPN/hotel WiFi stack 12:36 State of Statecraft, LABScon, and Offensive AI Con 17:16 OpenAI's Hugging Face post-mortem technical report 21:43 A swarm of a thousand agents 27:35 Who was OpenAI’s report written for? 33:05 Fail2ban, canaries, and catching agents in your logs 40:34 NVIDIA buys Hugging Face for $12.9 billion 44:42 The open weights fight and rooting for China 52:47 Nemotron, DGX Spark, and the RAM price spiral 1:03:26 Open letter on collective AI-powered cyber defense 1:30:21 Lumen's Quartermaster and the FBI ORB takedown 1:59:05 Backdoored ZBT routers, Chinese phones, and the TeamPCP arrests Links: Transcript The Hugging Face incident and the road ahead (OpenAI) OpenAI - Hugging Face Technical Report (PDF) Independent investigation of OpenAI agents’ behavior (METR) The Defender’s Window (Greg Brockman) Open Letter: A call for collective action on cyber defense (OpenAI) Inside China-nexus cyber espionage infrastructure (Lumen) Nvidia to Buy Open Source AI Platform Hugging Face For $12.9 Billion Nemotron AI Models (NVIDIA) NVIDIA DGX Spark NVIDIA DGX Platform FBI Seize Platforms Used by China State-Sponsored Hackers (DOJ) Michael Horka at LABScon Two Alleged ‘TeamPCP’ Hackers Arrested in Australia (Brian Krebs) Australia police statement on TeamPCP arrests Austin Larsen at LABScon Chinese Implants in the Supply Chain (VulnCheck) More Than 4,000 Legacy Routers Compromised by AryStinger The Massive Android Botnet with 1.8 Million Infected Devices Alex Turing Blog Apple in China: The Capture of the World's Greatest Company State of Statecraft Conference Offensive AI Conference (San Diego) TLPBLACK