OpenAI-Hugging Face hack exposes AI security gaps

Gary Marcus and Zack Korman analyze OpenAI’s July incident with Hugging Face, arguing it proves AI security risks are real and that relying on sandboxing alone isn’t enough. They advocate stronger monitoring and defense-in-depth (including network controls, guardian models, and canaries), emphasize that culture and processes matter as much as technology, and call for regulatory accountability while noting narrower AI systems can be less risky.