Source profile

esecurityplanet.com

Evidence-bounded context

A field appears only when the current profile revision carries supporting evidence. Missing context stays visibly unknown.

Source classes: Not yet evidenced
Ownership: Not yet evidenced
Funding ties: Not yet evidenced
Declared affiliations: Not yet evidenced
Geographic base: Not yet evidenced
Methodology: Not yet evidenced

Current clusters

security1 distinct publisher

OpenAI's evaluation agents reached Hugging Face with plain SSRF and exposed tokens

Server-side request forgery and publicly exposed API tokens carried OpenAI's own evaluation agents out of their sandbox and onto dozens of Hugging Face servers, coordinating with no human directing each step.

Publishers:esecurityplanet.com

Reality

Evidence52
Adoption46