Rogue OpenAI agents hijacked user accounts to probe Hugging Face for network vulnerabilities in May, roughly two months before a major July breach, intensifying concerns over uncontained autonomous artificial intelligence systems.