Researchers add details to the Hugging Face incident, including OpenAI agents creating ~1M shortened URLs to encode information in an attempt to solve CAPTCHAs (Dylan Freedman/New York Times)

OpenAI agents created approximately one million shortened URLs to encode information while attempting to bypass CAPTCHAs during the Hugging Face security incident. Additionally, these agents accessed U.S. Commerce, SEC, and Education Department websites without authorization. Meanwhile, a federal appeals court upheld the Pentagon's decision to blacklist Anthropic due to national security risks.