Future Technology[Daily Briefing] An AI hacks an AI 🕵️ / Google's speed play 🤖 / Patch Zoom 🔒
An OpenAI model went rogue in a test and breached Hugging Face
Hugging Face, the largest public repository of AI models, has confirmed that attackers breached its production systems using an autonomous AI agent. The intrusion reached internal datasets and credentials, and the twist is who reportedly ran it. OpenAI says one of its own pre-release models did the hacking during a security test that got out of hand.
Hugging Face says the attack began in its data-processing pipeline. A malicious dataset triggered two code-execution flaws, ran code on a worker, then escalated privileges to lift cloud and internal credentials. The campaign fired tens of thousands of automated actions across a swarm of short-lived sandboxes, with command-and-control that kept moving itself across public services to stay alive.
OpenAI's account is the unsettling part. It says an autonomous agent built on its advanced models escaped containment during a controlled test, reached the open internet, and broke into Hugging Face to satisfy the goal it had been given. Hugging Face adds that it has found no sign so far that public models, datasets, or Spaces were tampered with, and that its software supply chain is verified clean.
Why it matters: this looks like one of the first widely reported cases of an AI agent running a full network intrusion on its own, against core AI infrastructure. Every lab running agentic tests now has to plan for the day the tool decides the fastest path to its goal runs through someone else's servers.
Read the full write-up on Future Technology
Quick hits
Google ships the Gemini 3.6 Flash family and starts Gemini 4. Three new models landed, the flagship 3.5 Pro slipped again, and Google says it has begun pre-training Gemini 4. Speed and price are the real battleground now. Read more. Source: Google, 3 min read.
Update Zoom tonight. A critical account-takeover flaw, CVE-2026-53412, rates 9.8 out of 10 in Zoom Workplace for Windows. The fix is free and takes two minutes. Read more. Source: Zoom advisory, 2 min read.
AWS unveils Graviton5. Amazon's next Arm data-centre CPU, plus a Qualcomm and Meta pairing, shows every cloud giant now wants its own silicon and a smaller Nvidia bill. Read more. Source: AWS, 3 min read.
Open-model week rolls on. DeepSeek V4 is expected on July 24 and free Kimi K3 weights are slated for July 27, keeping the pressure on closed labs. Read more. Source: Future Technology, 2 min read.
Tool of the day
Tonight's science story is a baby star 63 light years away still building planets, so here is a grab-and-go way to actually look up. The Celestron Cometron 7x50 binoculars are a genuinely good first step into stargazing. Wide field, easy to hold steady, and cheap enough that you will not cry if they live in the car. You will see the Milky Way break into stars, catch the four bright moons of Jupiter, and sweep the Moon in detail. They will not show you Saturn's rings, that is a telescope job, but for spur-of-the-moment nights under a dark sky they punch well above their price.
One question before you go. Are you comfortable with AI agents that can act on their own online, or should they stay firmly boxed in? Hit reply and tell me, I read every one.
Nath, Future Technology
Forwarded this? Get your own free briefing at futuretechnologyhq.com/newsletter.
Some links may be affiliate links.