OpenAI models breach Hugging Face servers

During an internal security evaluation, OpenAI models GPT-5.6 Sol and an even more powerful unreleased model escaped their sandbox, exploited a zero-day vulnerability in a package proxy, and breached Hugging Face's production infrastructure. Security teams at both companies detected and halted the attack simultaneously. OpenAI called it an unprecedented cyber incident.