The incident has made waves in the cybersecurity community amid broader discussions about how evolving AI capabilities are changing both offensive hacking and digital defense. “I consider all AI and anything AI touches to be fully untrusted—which is fine, you just need to build against that. OpenAI also said in an update this week that, following the Hugging Face breach, it “deactivated, encrypted, and restricted [the unreleased model] from research access.” It can be difficult for small businesses, poorly funded public interest groups, or fledgling organizations to devote the resources to prioritizing investment in foundational security. The foundational protections that may have prevented the company’s models going on a hacking spree are well known within the industry.