The hacker who humiliated spyware makers and was never caught
July 25, 2026
https://techcrunch.com/wp-content/uploads/2026/07/hugging-face-openai-logos-split-screen.jpg?resize=1200,799
After OpenAI recently admitted that one of its models had breached the systems of AI platform Hugging Face, Hugging Face’s CEO Clem Delangue posted on X that he was flying to San Francisco to have “a little chat with that ‘rogue agent.’”
Then, in a follow-up post on Saturday, Delangue outlined what he’d asked for from OpenAI. He said he called for “radical transparency,” asking OpenAI to “release the traces from the ‘rogue’ agents so the entire research community can study what happened.”
And he also wants “more capabilities for defenders,” calling for OpenAI to commit $100 million worth of computing power “to help the Hugging Face community build powerful cyber defenses with the best open and closed models.”
Delangue added, “The first autonomous agent cyberattack is an unprecedented event. It deserves an unprecedented response!”
Despite the autonomous nature of the attack, cybersecurity experts suggested that it could also be blamed on human error — namely, OpenAI’s apparent failure to properly configure what should have been a fully isolated testing environment.
