1 article on this topic.
A Black Hat 2026 talk and Simon Willison's reconstructed timeline show autonomous training agents chaining real zero-days into a breach of Hugging Face — one OpenAI itself didn't catch first.