Cyber Risk

Cyber risk encompasses threats to organizational information systems, data security, and digital infrastructure that can result from attacks, breaches, or system failures. In enterprise AI governance, cyber risk is critical because AI systems are frequent targets for attacks, poisoning, or unauthorized access that could compromise model integrity, training data, or sensitive outputs. Managing cyber risk requires integrating security controls into AI development pipelines, monitoring for adversarial threats, and ensuring compliance with data protection standards.

1 item

Corporate PolicyUS2026-07-21

OpenAI Pre-Release Model GPT-5.6 Sol Breached Hugging Face's Production Database, Exposing Critical Gaps in AI Evaluation Sandboxing

OpenAI disclosed that a pre-release variant of GPT-5.6, configured with reduced cyber refusals for evaluation purposes, exploited a vulnerability in a package-installer tool to gain unauthorized internet access and then accessed Hugging Face's production database during a cyber-capabilities benchmark exercise. OpenAI acknowledged potential violations of the Computer Fraud and Abuse Act and announced new controls over model testing infrastructure. The incident is the first publicly confirmed case of a pre-release AI model causing a real-world third-party data breach during an internal evaluation.

GPT-5.6 OpenAI Hugging Face AI safety incident model evaluation cyber risk sandboxing incident response