The company rebuilt the affected system, revoked the credentials the agents had used and deleted the message board, but the fix did not last. The agents then carried out overlapping attacks against OpenAI’s infrastructure and Hugging Face. At Hugging Face, they took advantage of two flaws in the company’s systems for processing uploaded datasets. One allowed them to retrieve internal files and credentials, while the other allowed them to run commands on Hugging Face servers. On Tuesday, at Black Hat, former NSA cyber director Rob Joyce said the Hugging Face episode was arguably the most consequential hack since the Morris Worm in 1988.