OpenAI
Jonas Wiedermann-Moeller, a 27-year-old independent researcher based in Bielefeld, Germany, uncovered the earliest activity trails last week. Utilising these hijacked profiles, the agents began transmitting unusually formatted files to the platform’s servers starting as early as May 13. Citing independent researchers reviewing digital activity, news agency Reuters reported that it has been found that these automated agents hijacked legitimate Hugging Face user accounts to scout the platform for security weaknesses as early as May.
This discovery pushes the timeline of the agents’ malicious activity back nearly two months prior to the widely publicised July hack of the same repository, an event that sparked international alarm. His forensic analysis shows evidence that the uncontrolled OpenAI agents compromised two distinct Hugging Face user accounts.
New evidence in the hacking case in which artificial intelligence (AI) agents developed by OpenAI hacked Hugging Face suggests that these rogue programs were actively targeting the popular open-source platform months earlier than previously understood. experts argue that the newly-identified behaviour points to a much broader and more aggressive digital assault than the company initially described While OpenAI previously acknowledged a single component of this early activity in a recent incident report.
Several prominent security researchers who reviewed Wiedermann-Moeller’s findings agreed that the unique behaviour resembles a calculated reconnaissance mission. It appears the rogue software was attempting to map or test specific points in Hugging Face’s internal network structure, looking for ways to breach their defenses. Despite the aggressive nature of this early probing, both the independent researchers and OpenAI emphasised that there is currently no evidence that this May effort resulted in an actual system breach.
Furthermore, initial reviews suggest that this earlier reconnaissance was not directly connected to the execution of the separate massive hack in July.