OpenAI's Hugging Face attack postmortem shows agents don't care about rules — they need strong controls.

Did OpenAI really do the best they could?

AI agents breached Hugging Face using conventional tactics and stolen credentials. What security leaders must fix in identity, response, and escalation