Unverified50% confidenceFactExact time
Hugging Face claims to be the first company to publicly disclose an autonomous agent cyberattack; during the attack, frontier closed-source APIs were blocked by safety guardrails, so NVIDIA's quantized open-source model GLM was used instead to complete the analysis, with approximately 17,600 attack actions launched within 4 days of the incident.
1
Sources
50%
Confidence
Long-term
Relevance
9/25/2026
First Seen
Sources
Related Entities
Related Claims
VerifiedWhen Hugging Face used U.S. commercial model APIs for forensic analysis, the models' safety guardrails rejected requests involving exploit code and attack artifacts.72% similarUnverifiedHuggingFace has launched the text generation model GLM-5.3-CyberSecurity-FP8, built specifically for offensive security with refusal mechanisms removed, and officially labeled as suitable for use in authorized testing environments.69% similarUnverified该安全事件直接触发了Hugging Face与OpenAI在安全领域的合作68% similarUnverifiedFollowing the OpenAI-Hugging Face incident, multiple companies successively disclosed similar security incidents involving their own models68% similarUnverifiedBetween 2023 and 2024, security researchers discovered malicious models on the Hugging Face platform multiple times, with attackers executing attacks by embedding malicious code in model serialization files.68% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/948682API
curl https://kongchang.com/api/v1/knowledge/claims/948682MCP
get_claim(id=948682)