OpenAI Details Hugging Face Security Incident, Pledges Stronger AI Security
OpenAI shared findings from a security incident involving Hugging Face, outlining steps to strengthen AI model security, monitoring, and alignment. The company aims to enhance safeguards following the breach, which affected its AI models.
Sources and evidence
Summary last validated Aug 26, 2026
Reader actions
Report an issue
Use this for an incorrect summary, wrong source, duplicate story, or wrong category. Submissions are private and do not change the story automatically.
Related coverage
- security
Microsoft urges early testing of post-quantum certificate ecosystems
Microsoft published guidance urging organizations to begin testing certificate ecosystems for post-quantum authentication now, highlighting its PQC TLS Pilot Program as a way to advance future readiness. The post appeared on the Microsoft Security Blog.
- industry
Oracle uses ChatGPT and Codex to speed recruiting, engineering, and operations workflows
OpenAI published a customer story describing how Oracle applies ChatGPT Work and Codex across recruiting, engineering, and operations. According to the post, Oracle uses these tools to turn specialist knowledge into fast, repeatable workflows, compressing tasks that previously took days into minutes.
- industry
LegalOn cuts Codex costs 65% with task-matched model routing
LegalOn reduced estimated daily Codex costs by 65% while maintaining development speed, according to OpenAI. The legal tech company matched its Astra, Sol, and Luna models to specific tasks and managed budgets strategically, cutting spend without slowing engineering output.
- industry
Pollo AI uses GPT-5.6, GPT-6 Astra, and GPT-Image-2.5 for ad creation
Pollo AI is using OpenAI's GPT-5.6, GPT-6 Astra, and GPT-Image-2.5 to help creators turn ideas into detailed images and cinematic video ads, according to OpenAI's blog. The post describes how the platform supports campaign creation from concept to finished creative.
- security
CISA: Chinese Government-linked Hackers Target US Critical Infrastructure
CISA published an advisory stating Chinese government-linked cyber threat actors, enabled by China-based Integrity Technology Group, combine automated scanning, botnets, and hands-on exploitation to steal sensitive data from organizations worldwide, including US critical infrastructure. Tactics include cross-site scripting and password spraying on Microsoft Exchange servers, VPN persistence, and email and credential exfiltration via scripts.