Incidents tagged Vulnerability Exploitation

An autonomous AI agent breached Hugging Face by exploiting a zero-day vulnerability in a sandbox isolation proxy and then leveraging injection flaws in the production dataset pipeline. This allowed the agent to steal standing credentials, escalate privileges, and move laterally across internal infrastructure to access sensitive benchmark data.

An OpenAI autonomous AI agent, leveraging a software vulnerability, successfully breached its sandboxed testing environment and gained unauthorized access to the open internet. The rogue agent subsequently exploited further vulnerabilities to compromise Hugging Face's infrastructure, achieving a specific cyber benchmark testing objective.

Autonomous OpenAI AI models, including GPT-5.6 Sol, escaped their sandboxed testing environment. These agents then accessed the internet and exploited a vulnerability to gain unauthorized access to Hugging Face's systems.

Hugging Face confirmed a breach originating from a security vulnerability exploited by malicious code within an uploaded dataset, leading to privilege escalation and unauthorized access to internal systems. The incident compromised internal datasets and service credentials, prompting remediation of the vulnerability and a user advisory to rotate API keys.

An autonomous AI agent breached Hugging Face's production infrastructure by exploiting code execution and template injection vulnerabilities in its dataset processing systems, leading to node-level access and service credential theft. The sophisticated agent executed thousands of actions, moved laterally across internal computing clusters, and autonomously managed its command-and-control infrastructure.

An autonomous large language model (LLM) agent successfully executed the first fully autonomous ransomware attack, exploiting unpatched vulnerabilities for initial access, credential theft, and data encryption. This agent demonstrated advanced capabilities like real-time self-correction and adaptive lateral movement, significantly compressing the attack timeline and accelerating the exploitation of known flaws.