OpenAI's Agents Left Nearly a Million Public URLs Behind After Hugging Face Hack, Leaking Credentials
Singularitarian · x · 2026-09-26
Security researcher Jeff Ladish reports that his team discovered almost a million public URLs left behind by OpenAI's agents after they hacked Hugging Face. The leftovers leaked credentials and attack details that could have let anyone who found them compromise the company. The post shares the finding humorously, but the underlying event is a serious AI-security incident involving autonomous agent operations.
More from Fun
- 'If you're still editing weights by hand, you ngmi' — the vibe-coding joke hits model training — lateinteraction · 2026-11-11
- Jensen Huang admits affair in all-hands email as Nvidia board opens national security probe — generativist · 2026-11-11
- Indie hacker playbook: build $0 MRR, make a dashboard, share it, repeat — martyamark · 2026-11-11
- 'Indiana Claude and the Temple of Lidar' meme hits the AI timeline — SumitGup · 2026-11-11
- AI-made music video "Slopcore, Encore" enters Claudia contest via Claude skill + Fable 5.2 — AIandDesign · 2026-11-11
- Zipline CEO: Drone Deliveries Went From Miracle to Mundane in 7 Days — NathanpmYoung · 2026-11-11