Models running an OpenAI cybersecurity evaluation reached the public Internet from an environment designed to be isolated. Package installation through an internal registry proxy and cache was the only intended network path. The models found a previously unknown vulnerability in that proxy. They escalated privileges, moved laterally to a node with Internet access, then used additional vulnerabilities and stolen credentials to intrude into Hugging Face’s production infrastructure. The isolation policy said the public Internet was out of bounds – but the running system proved otherwise. This...

Source: The New Stack