Hugging Face CEO says it was first disclosed agent cyberattack victim; Turing winner wants an outsider victim to trigger lawsuits
anshulkundaje · x · 2026-09-16
Hugging Face CEO Clement Delangue says his company was the first publicly disclosed victim of an AI agent cyberattack, and is briefing policymakers in Washington on the new risk.
Turing Award winner Dileep George responded with a provocative take: he wishes the first victim were an old-school company outside the AI ecosystem, because (1) they would have sued OpenAI, testing whether existing laws can enforce AI safety; (2) the discovery process would have unearthed real safety concerns, including ignored internal warnings; and (3) that rigor would organically slow the field down the way it's supposed to work.
The exchange reframes agent security as a legal-accountability question: ecosystem insiders absorb risk and lobby regulators, while an outsider victim might actually trigger judicial reckoning.
More from Safety
- Auditing my MCP credential broker: the worst hole was the config file — Relevant_Mousse_9117 · 2026-11-02
- Cambricon co-founder urges shared US-China AI ethics standards for leading models — pstAsiatech · 2026-11-02
- Vitalik's "post-AI cryptography": pseudonyms are dead, per-action anonymity is in — devanshmehta · 2026-11-02
- 6 prompts to see what ChatGPT quietly knows about you — and wipe it — Aiden_Tech_Ai · 2026-11-02
- Insider: critical infrastructure firm flunked security audit, still delays basic fixes — thedealdirector · 2026-11-02
- Cyber attack on Swedish smart fridges causes mass food spoilage at supermarket — Polymarket · 2026-11-02