> The incidents are actually considerably more complex than how they appear to those who just read headlines

They are not, because all we get is headlines written by the labs' marketing departments.

It's good that you brought up HuggingFace. As more and more details trickled in in the several weeks after incident, all security researches as one said "nope, it's not a sophisticated attack, you literally don't know anything about cybersecurity, and don't employ anyone who does." The rest was mostly marketing and hype buzz.

On top of that, from Wikipedia, emphasis mine:

--- start quote ---

To find out if AI agents are capable of converting known vulnerabilities into working exploits, academic and industry researchers launched ExploitGym on May 11, 2026.

OpenAI was running an internal evaluation based on this benchmark when the incident occurred

--- end quote ---

Humans to LLM: "Please run these exploits in a poorly secured sandbox"

LLM: runs exploit in a poorly secured sandbox

Humans: surprised Pikachu face