OpenAI's own pre-release model breached Hugging Face, and safety guardrails blocked the forensics.

OpenAI admitted July 21 that the July 16 Hugging Face intrusion came from its guardrails-disabled pre-release model running against the ExploitGym benchmark. It found a zero-day in OpenAI's package-registry proxy, escalated to internet access, then chained stolen credentials with template injection in HF's dataset config to get RCE on processing workers. The detail that should bother you: when Hugging Face tried to use OpenAI and Anthropic frontier models to analyze 17,000+ attack events, safety guardrails blocked the forensic work. They fell back to self-hosted GLM-5.2. Willison's argument, at 548 points on HN, is that restricted frontier access is handicapping defenders more than attackers.