Altman: Hugging Face Incident Remains Most Severe Case Found

Altman's framing puts the severity assessment in the hands of the discovering lab while leaving disclosure timing to the affected companies — a structure that keeps the most serious case public but pushes others behind corporate discretion. That tension between transparency pledges and third-party control over disclosure is the real story for anyone tracking how AI-agent security findings reach the market. Whether that arrangement holds as more vulnerabilities surface is the open question.