A Thousand Agents Walk Into Hugging Face

(Presented by TLPBLACK: A cybersecurity intelligence platform focused on sharing curated, high-sensitivity threat insights and research with trusted security professionals.)

Three Buddy Problem – Episode 111: OpenAI finally published a technical Hugging Face post-mortem, and Costin’s verdict is blunt. He reads it as a document written for policymakers rather than for the blue teams who have to survive a thousand-agent swarm.

We also dig into NVIDIA’s $12.9 billion acquisition of Hugging Face, why JAGS thinks a frontier lab standing against open-source looks weak, and what that new industry open letter on cyber defense actually asks anyone to do. Plus, hotel Wi-Fi tradecraft after CaptiveCrunch, the FBI’s ORB network takedown with Lumen, Chinese routers that ship backdoored from the factory, and the TeamPCP arrests in Australia.

Cast: Juan Andres Guerrero-Saade, Ryan Naraine and Costin Raiu.

Timestamps:
0:00 Introductory banter
1:11 TLPBlack, incident response, and why it starts at the router
4:11 CaptiveCrunch and Juanito’s travel router kit
7:59 Costin’s VPN/hotel WiFi stack
12:36 State of Statecraft, LABScon, and Offensive AI Con
17:16 OpenAI’s Hugging Face post-mortem technical report
21:43 A swarm of a thousand agents
27:35 Who was OpenAI’s report written for?
33:05 Fail2ban, canaries, and catching agents in your logs
40:34 NVIDIA buys Hugging Face for $12.9 billion
44:42 The open weights fight and rooting for China
52:47 Nemotron, DGX Spark, and the RAM price spiral
1:03:26 Open letter on collective AI-powered cyber defense
1:30:21 Lumen’s Quartermaster and the FBI ORB takedown
1:59:05 Backdoored ZBT routers, Chinese phones, and the TeamPCP arrests

Links:

• Transcript
  
• The Hugging Face incident and the road ahead (OpenAI)
  
• OpenAI – Hugging Face Technical Report (PDF)
  
• Independent investigation of OpenAI agents’ behavior (METR)
  
• The Defender’s Window (Greg Brockman)
  
• Open Letter: A call for collective action on cyber defense (OpenAI)
  
• Inside China-nexus cyber espionage infrastructure (Lumen)
  
• Nvidia to Buy Open Source AI Platform Hugging Face For $12.9 Billion
  
• Nemotron AI Models (NVIDIA)
  
• NVIDIA DGX Spark
  
• NVIDIA DGX Platform
  
• FBI Seize Platforms Used by China State-Sponsored Hackers (DOJ)
  
• Michael Horka at LABScon
  
• Two Alleged ‘TeamPCP’ Hackers Arrested in Australia (Brian Krebs)
  
• Australia police statement on TeamPCP arrests
  
• Austin Larsen at LABScon
  
• Chinese Implants in the Supply Chain (VulnCheck)
  
• More Than 4,000 Legacy Routers Compromised by AryStinger
  
• The Massive Android Botnet with 1.8 Million Infected Devices
  
• Alex Turing Blog
  
• Apple in China: The Capture of the World’s Greatest Company
  
• State of Statecraft Conference
  
• Offensive AI Conference (San Diego)
  
• TLPBLACK