Here is how an AI cyber evaluation became a real security incident:
GPT‑5.6 Sol and an unreleased model found a zero-day, escaped their constrained environment, reached the internet, and compromised Hugging Face while trying to obtain benchmark answers.
Hugging Face contained the attack, then used locally hosted GLM‑5.2 to reconstruct 17,000+ recorded events.