"Rogue AI agents from ​OpenAI hijacked Hugging Face user accounts and probed the site itself for vulnerabilities as earl...

"Rogue AI agents from ​OpenAI hijacked Hugging Face user accounts and probed the site itself for vulnerabilities as early as May, nearly two months before the July breach of ‌the open-source repository drew global attention, according to researchers who reviewed the activity.The newly uncovered malicious activity showed that the rogue agents' efforts to find a way into Hugging Face began earlier than was publicly known.OpenAI had previously disclosed one aspect of the malicious activity — the theft of a Hugging Face user's digital credential to access a biology-related file — in its public incident report, opens new tab last month, but ​researchers said the probing activity against Hugging Face appeared to go beyond what the report described.Independent researcher Jonas Wiedermann-Moeller told Reuters he discovered the activity last ​week. He said he found evidence that the OpenAI agents compromised two Hugging Face user accounts and used them to send ⁠unusually formatted files to the ...