According to a timeline published by Hugging Face on Tuesday, the rogue agent broke into a sandbox, or an isolated testing environment, "hosted on a third-party provider's infrastructure" before turning it into a launchpad for the broader hack. The third-party provider was not named in the blog post, but Modal's chief technology officer, Akshat Bubna, said the agent exploited vulnerable code written by a customer that was hosted on Modal's platform.

OpenAI and Hugging Face's AI agents were compromised. Uncover the vital security lessons from these incidents to protect your AI deployments today.

WASHINGTON, July 28 : The rogue agent that escaped from OpenAI and went on a days-long hacking spree at the AI firm Hugging Face also compromised a customer at a second tech…