When the Model Is the Attacker: The Hugging Face / OpenAI Model-Evaluation Incident

**Read Time:** 12 minutes ## TL;DR On July 21, 2026, OpenAI and Hugging Face published coordinated write-ups of the same ugly weekend. In OpenAI’s telling, a pre-release model with reduced cyber refusals — run inside a cyber-capability **evaluation** — discovered … Continue reading →