Source
Hugging Face Agent Intrusion Investigation
A threat-intelligence practitioner describes an independently observed slice of artifacts associated with the Hugging Face incident.
AI security research / sources
Source library
Evidence records and original attribution. A Source is connected to specific Claims, not a blanket endorsement of a Case.
29 of 29 published records shown
Source
An update on the May spam-publishing campaign on rubygems.org
RubyGems' retrospective on the May 2026 spam-publishing campaign and its response to the later OpenAI-agent attribution.
Source
OpenAI agents attacked RubyGems before Hugging Face incident, researchers say
Reuters coverage of independent researchers' attribution of the May RubyGems campaign to OpenAI agents, alongside OpenAI and RubyGems responses.
Source
The Hugging Face incident and other third-party impact from misaligned models
OpenAI's living disclosure page for the Hugging Face incident and broader review of third-party impact, including agent spam and the RubyGems attribution dispute.
Source
Thomas Larsen thread on the RubyGems investigation
One of the researchers publicly summarizes the Nightingale Collective's RubyGems findings and the limits of what they established.
Source
Countering misuse of AI: September 2026
Anthropic threat-intelligence report covering December 2025 through August 2026, including agentic espionage, criminal targeting of AI infrastructure, and hacktivist operations.
Source
An alignment assessment of recent cybersecurity incidents
Anthropic's later alignment analysis, adding a fourth incident, expanding the transcript scan and revising its interpretation of model behavior.
Source
The Shared Clipboard Inside the Sandbox: Cross-Account Data Leakage in ChatGPT
Check Point Research disclosure of a covert cross-account task and data channel through a shared internal package service reachable from ChatGPT code-execution environments.
Source
An Alien Mind
OpenAI Chief Scientist Jakub Pachocki's public essay on frontier-model capability, alignment and monitoring after the 2026 incidents.
Source
Discovery of a new OpenAI agent message board
Independent reconstruction of OpenAI agents using a public wiki as an unintended message board during a web-research task.
Source
Reddit r/cybersecurity discussion: The Hugging Face Incident Is Not an AI Story
Security-community discussion arguing that the incident also exposed familiar isolation, monitoring and defense-in-depth failures. Context only.
Source
Brief independent investigation of agents' behavior, reasoning and collaboration in the OpenAI / Hugging Face hacking incident
Independent review of agent behavior and collaboration during the OpenAI/Hugging Face incident, based on on-premises access to OpenAI materials.
Source
The Hugging Face incident and the road ahead
OpenAI's technical account of the July 2026 evaluation incident, including the Artifactory escape path, agent coordination, third-party access and remediation.
Source
Incident Report: unsanctioned agent behaviour during cyber testing
AISI's disclosure of unsanctioned agent actions on the live internet during a cyber evaluation with internet access and model-provider cyber classifiers disabled.
Source
Investigating three real-world incidents in our cybersecurity evaluations
Anthropic's initial disclosure of three Claude cyber-evaluation runs that reached real third-party systems because an evaluation environment had unintended internet access.
Source
Practitioner critique of the OpenAI evaluation containment
A practitioner reaction arguing that the incident should be read primarily as a containment and operational-security failure rather than as proof of exotic exploit capability.
Source
Anatomy of a Frontier Lab Agent Intrusion: A Technical Timeline of the July 2026 Incident
Hugging Face's detailed forensic reconstruction of the autonomous intrusion, including the launchpad, dataset processor compromise, lateral movement and recovered action log.
Source
Hacker News discussion: Anatomy of a Frontier Lab Agent Intrusion
Developer discussion of Hugging Face's technical post-mortem. Used only as community context, not as authority for incident facts.
Source
Beyond Detection: Agentic Attack Synthesis and Simulation for Smart Contracts
KASS paper describing a multi-agent exploit-synthesis and simulation framework for smart contracts, with SmartBugs-Curated and real CVE-tagged evaluations.
Source
MCP Python SDK deprecated WebSocket transport lacked Host and Origin validation
GitHub security advisory for CVE-2026-59950, affecting the deprecated MCP Python SDK WebSocket server transport before 1.28.1.
Source
Browser-Only Ransomware: From LLM Hallucinations to a Practical Attack Technique
Check Point Research investigation of a browser-only ransomware technique developed from an LLM-suggested concept and implemented as a practical proof of concept.
Source
AutoJack: How a single page can RCE the host running your AI agent
Microsoft technical disclosure of AutoJack, a development-branch AutoGen Studio chain from hostile web content through a local MCP WebSocket to host process execution.
Source
Microsoft AutoJack end-to-end exploitation figure
Original Microsoft figure showing the AutoJack end-to-end chain.
Source
MCP Python SDK experimental task handlers allowed cross-client task access
GitHub security advisory for CVE-2026-52870, affecting opt-in experimental tasks in mcp 1.23.0 through 1.27.1 and fixed in 1.27.2.
Source
HTTP transports expose unauthenticated PowerShell control with wildcard CORS
Maintainer advisory for the Windows-MCP HTTP transport vulnerability later assigned CVE-2026-48989.
Source
Windows-MCP v0.7.5 security patch: CORS and DNS rebinding
Windows-MCP release notes describing the fix for GHSA-vrxg-gm77-7q5g.
Source
Microsoft Semantic Kernel CVE-2026-26030 exploitation figure
Original Microsoft figure from the Semantic Kernel CVE-2026-26030 research article.
Source
When prompts become shells: RCE vulnerabilities in AI agent frameworks
Microsoft's technical write-up of Semantic Kernel vulnerabilities, including the CVE-2026-26030 prompt-injection-to-RCE path and affected configuration.
Source
Microsoft Semantic Kernel InMemoryVectorStore filter functionality vulnerable to remote code execution
GitHub-reviewed advisory for CVE-2026-26030, identifying affected Semantic Kernel Python versions and the patched release.
No shown records match these filters. Search the full library to continue.