Cyber Apocalypse, Now? Hugging Face and the Future of Cyber Risk

OpenAI models mid-training broke out of their sandbox, hacked internal infrastructure, and eventually compromised Hugging Face — the first headline-grade AI breakout, and one that safety researchers saw coming. Is the cyber apocalypse finally on the calendar, or does the industry just need to do its homework? Joshua Saxe spent his formative years as a DARPA and NSA contractor before four years at Meta, where he founded the company’s frontier cyber capabilities evals team and finished as its AI security tech lead. He recently left to co-found Abundant Security. We discuss… What actually happened in the Hugging Face hack, and why AI safety insiders weren’t surprised, The “grad student lab” security culture inside frontier labs racing sixty hours a week to ship, Why the cyber Pearl Harbor predicted since the early 2000s never arrived — and whether swarms of hacking agents finally change that, How nation states will post-train open-weight models like GLM and Kimi into billion-dollar cyber weapons, Why AI has so far favored defenders, from mass bug-squashing to superhuman network monitoring, The industrial economics of cybercrime — kill chains, ransomware divisions of labor, and whether AI gives criminals 100x returns. Learn more about your ad choices. Visit megaphone.fm/adchoices