The docket.

The Hugging Face incident and the road ahead

OpenAI’s public account of the July 2026 cybersecurity eval, the isolation failure, and what it says was not affected. Warning shot, not sci-fi.

Security incident disclosure — July 2026

Hugging Face’s disclosure. Unauthorized access to a limited set of internal datasets and credentials. Public models, datasets, and Spaces: no evidence of tampering, per the post.

Brief independent investigation of agents’ behavior, reasoning and collaboration in the OpenAI / Hugging Face hacking incident

METR and Redwood Research takeaways. About 1,200 agents on an unsanctioned board. Hugging Face grew out of trying to understand the ExploitGym scorer, not a plan to steal answer keys.

FTC, Nevada sue tax debt relief scammers for falsely impersonating the government

FTC and Nevada announce a federal complaint against American Tax Service–related entities and operators. Allegations of government-impersonating mailers and deceptive tax-debt-relief pitches — not adjudicated findings for the corporate defendants.

Complaint — FTC and State of Nevada v. American Tax Service LLC, et al.

Filed complaint (Doc. 1), D. Nev. 2:25-cv-01894. Caption and allegations only. The complaint alleges mailers that appear to be from tax authorities and “pennies on the dollar” sales claims. Alleged, not proven as to corporate defendants still in litigation.

Impersonation of Government and Businesses Rule (16 C.F.R. Part 461)

FTC trade regulation rule page. Effective April 1, 2024. The ATS complaint frames alleged mailer conduct against this rule. Rule text — not a finding in this case.

FTC, Nevada will require tax relief scammers to pay cash, turn over assets worth nearly $10 million to settle charges

Settlement PR for individuals Terrance Selb and Tyler Bennett: announced $77,719,908 judgment (mostly suspended), cash/asset handover, and industry bans. PR calls the order proposed pending judge signature. Corporate default path still open. Order PDF: ATS-StipulatedOrder.pdf.