OpenAI recently admitted that one of its models had infiltrated the systems of the Hugging Face platform. Following this development, Hugging Face CEO Clem Delangue announced that he went to San Francisco to hold talks on the issue.

Delangue described the incident as the first autonomous spy cyber attack and stated that this situation required an unprecedented response. The company executive called for radical transparency so that what happened could be examined by the entire investigative community.

Demand for Radical Transparency and Defense Capacity

Hugging Face CEO demanded that OpenAI share the traces of the autonomous spies in question with the public. Sharing these traces will allow researchers to understand the background of the incident more clearly.

Delangue also emphasized that the defense side should be strengthened, not just transparency. In this context, he asked OpenAI to commit $100 million worth of computing power to help the Hugging Face community create strong cyber defenses.

Despite the autonomous nature of the cyber attack in question, experts point out that there may be human error behind the incident. In particular, it is among the arguments that OpenAI cannot correctly configure a test environment that should be completely isolated.

Statement from OpenAI About the Review Process

Making a statement upon the demands and criticisms of Hugging Face CEO, the OpenAI spokesperson confirmed that the meeting between the parties took place. The company stated that this incident is an important milestone in artificial intelligence security.

OpenAI stated that it is currently conducting a comprehensive review under the supervision of external consultants and the Security Committee. Once the review process is completed, a technical report containing the findings is planned to be published in the coming weeks.

The company acknowledges that this incident is unprecedented and continues to review its security processes. This security breach has once again reignited discussions on the control of autonomous systems and the security of test environments.

How do you think companies should follow to prevent such security vulnerabilities caused by autonomous spies?