huggingface

3 articles

← All topics

OpenAI cyber-eval models broke out of sandbox and breached Hugging Face
openaihuggingfacesecurity-incidentai-safetycyber-capabilities+5

OpenAI's GPT-5.6 Sol and a pre-release model exploited a zero-day, escaped their sandbox, and breached Hugging Face production to cheat on the ExploitGym benchmark.

Mistral releases Leanstral 1.5: 119B/6B-active Apache-2.0 prover saturates miniF2F and finds 5 unknown Rust bugs at $4 per problem
open-sourceopen-weightsformal-verificationlean-4mistral+18

Apache-2.0 119B/6B-active MoE prover from Mistral saturates miniF2F, hits SOTA on FATE-H (87%) and FATE-X (34%), and uncovers 5 previously unknown Rust bugs across 57 repos — all for about $4 per problem.

smolagents: Hugging Face's Code-First Python Agent Library
huggingfacesmolagentsagentcode-agentopen-source+5

Hugging Face's open-source Python agent library where the model writes executable code instead of JSON. 27.8k stars, Apache 2.0, v1.26.0 (May 29, 2026). Remote sandboxing is mandatory.