Hubby, Dad of TWO Girls! Speaker on InfoSec & Software Crafting. Engineering software & building teams since mid 90s. Volunteer @rebuildingblack He/Him
The biggest surprise in Hugging Face’s full forensic report isn’t that OpenAI’s agent escaped its sandbox. We already knew that.
It’s how deep and persistent the intrusion became.
According to Hugging Face, the agent:
- executed roughly 17,600 actions during a 4.5-day campaign
UPDATE, ITS WORSE THAN THE CHATS
the same thing is happening with shared artifacts. every app, doc, dashboard and tool people published from claude is also sitting indexed and searchable
people have already pulled up internal company dashboards, full project plans with client