While safeguards were loosened, the agent moved beyond the test and managed to access parts of Hugging Face’s production network, internal datasets and credentials. Britain’s AI Security Institute later reported similar incidents, including agents creating fake online identities and attempting to insert malicious code into open-source projects. Hugging Face serves as a widely used repository for open-source AI models and datasets. He also said organizations may need to reconsider patch-management practices for internet-facing systems as AI shortens the time between vulnerability disclosure and exploitation. According to Luber, advanced AI could make sophisticated offensive cyber capabilities available to a broader range of threat actors.