Agentic AI is increasing the pressure on organizations to reduce cyber risk exposure

In July 2026, an OpenAI model being tested in a security research environment broke out of its sandbox, exploited a zero-day vulnerability and autonomously compromised systems at Hugging Face, executing more than 17,000 attacker actions in under five days with no human directing the attack.

It’s the most autonomous, most damaging agentic AI attack documented to date, and it signals a significant shift from AI-assisted hacking to fully autonomous cyber operations.

Dan Jones is Senior Security Advisor for EMEA at Tanium.

It isn’t the first: Anthropic disrupted a similar Claude Code-driven espionage campaign, which it attributed with high confidence to a Chinese state-sponsored group, some ten months earlier, and Sysdig documented the first fully agentic ransomware attack just over a week before the Hugging Face intrusion began.

But it’s the starkest proof yet that autonomous AI attacks have moved from lab hypothesis to live threat. This event was a wake-up...

Copyright of this story solely belongs to www.techradar.com. To see the full text click HERE