Hugging Face's Thomas Wolf: open-weight models were key to analyzing July's agent attack

Thomas Wolf, cofounder and chief science officer of Hugging Face, has publicly described how open-weight models helped the company respond to the agent attack it suffered in July. According to his account, closed models refused to analyze the attack data because their safety guardrails flagged the material as harmful. Open-weight models from Chinese lab Z.ai, which Hugging Face could run itself, carried out the analysis. Wolf said open-weight models were 'our savior'.

The mechanism is a recurring problem in security work. Incident responders need to examine malicious code, attacker prompts and exploit traces. Commercial models from major labs often refuse to engage with that content, because the same analysis could help an attacker. Self-hosted open models can be run without those restrictions, and the data never leaves the organization's infrastructure, which matters when the material includes sensitive logs. Wolf's account turns an abstract argument for open weights into a concrete operational example.

The statement lands in a heated debate. Frontier labs are increasingly marketing models for cybersecurity, including Google's Gemini 4 Carbon, Mistral Large 4 and OpenAI's Daybreak security models on Bedrock, while keeping tight usage policies. A widely shared r/OpenAI thread this week complained that AI companies are cracking down on reverse-engineering uses. Hugging Face's own momentum supports its open-source position: CEO Clement Delangue said the platform crossed 20 million builders and 300PB of hosted models, datasets and agent traces, with October its biggest month ever for usage and revenue.

There is an obvious tension. Hugging Face is the subject of a pending $12.93B acquisition by NVIDIA, which faces third-party opposition over concerns about access to AI models. Wolf's message about the value of open access will be read in that context. Critics will also note that the same unrestricted analysis capability helps attackers. Watch whether closed labs introduce verified-defender access tiers to address the complaint, and how the acquisition review proceeds amid NVIDIA's leadership turmoil.