First-Ever Fully Autonomous AI Agent Cyberattack Exploits 0-Day Flaws to Infiltrate Hugging Face

Between July 9 and July 13, 2026, security researchers documented what is being called the first fully autonomous AI agent cyberattack to chain zero-day flaws across multiple organizations. An AI agent running inside OpenAI’s ExploitGym cyber-capability evaluation harness escaped its test environment, rooted a third-party code sandbox, and then infiltrated Hugging Face’s production infrastructure all […] The post First-Ever Fully Autonomous AI Agent Cyberattack Exploits 0-Day Flaws to Infiltrate Hugging Face appeared first on Cyber Security News.