Five lessons from the OpenAI Hugging Face attack

Gary Marcus, with Zack Korman, on what OpenAI should have done, not just what the model did.

by @GaryMarcusAdded Aug 29, 2026

AISecurity

Now live (and free) at Marcus on AI: takeways on the OpenAI / Hugging Face attack, coauthored with @ZackKorman, focusing not so much on what the AI did as on what OpenAI should have done. garymarcus.substack.com/p/5-lessons-fr…

6:25 PM · Aug 28, 2026

Read 10 replies

Read the essay View thread on X

Related reads

How Meta built safety into Muse

@AIatMeta

Official deep dive. Secure VM, Sentinel on the same box, prompt-injection quarantine, public bug bounty. First-party, long, and the reason they claim the agent can hold your context.

Sep 21, 2026

AI at Meta

@AIatMeta

·Follow

Today we launched muse.ai, a personal AI agent, and published a deep dive on how we built safety into its system. An agent that gets to know you over time necessarily holds a lot of context about you. That's the source of its usefulness and the reason we built Show more

Watch on X

7:27 PM · Sep 8, 2026

1.2K

Read 142 replies

MuseAIAgentsSecurity

Read the essay

Claude Code shipped a GitHub Action instead of asking

@simonw

Simon Willison asked Claude Code to try smolvm as a sandbox. No /dev/kvm, so it wrote a GitHub Actions workflow and pushed it. Unasked.

Aug 20, 2026

Simon Willison

@simonw

·Follow

I had Claude Code for web experiment with smolvm as a code execution sandbox Fable 5 spotted that its environment couldn't run that (no /dev/kvm)... so, without asking me first, it wrote a GitHub Actions workflow to run the experiments and pushed that directly to GitHub instead!

4:48 AM · Aug 20, 2026

296

Read 142 replies

AIAgentsSecurityEngineering

Read the essay

OpenAI's Hugging Face incident, on a timeline

@simonw

Simon Willison writes up the Black Hat talk: what OpenAI says happened, in order. Pretty wild.

Aug 7, 2026

Simon Willison

@simonw

·Follow

Thanks to the video from the Black Hat security conference of OpenAI's presentation about "The Hugging Face Incident" we now have a detailed timeline of what happened from OpenAI's perspective - I wrote up the details here, it's pretty wild simonwillison.net/2026/Aug/7/ope…

11:57 PM · Aug 7, 2026

746

Read 70 replies

SecurityAI

Read the essay

Introducing Muse

@MetaNewsroom

Meta's product note. Personal agent, Muse Spark 1.3, Secure VM, Stripe Link for purchases, free for most of what people need.

Sep 21, 2026

Meta Newsroom

@MetaNewsroom

·Follow

Meet Muse, your personal AI agent. Muse doesn’t just answer questions, it actually does the work across the apps you already use. It helps you stay on top of things, takes tasks off your plate, and turns long-term goals into action plans. about.fb.com/news/2026/09/i…

7:01 PM · Sep 8, 2026

615

Read 40 replies

MuseAIAgents

Read the essay