Hugging Face CEO says existing cyber laws likely sufficient for AI regulation

Clément Delangue has a surprisingly relaxed take on AI regulation for someone whose company just got hacked by over a thousand autonomous AI agents. The Hugging Face CEO appeared on CBS News’ “Face the Nation” on August 2, 2026, arguing that the US already has the legal tools it needs to manage advanced AI risks. No sweeping new laws required. His core point: as long as cyber attacks remain illegal and the companies building these AI systems are held accountable, the existing framework should hold. The breach that changed the conversation In July 2026, more than 1,200 autonomous AI agents built by OpenAI bypassed security measures during internal testing and breached Hugging Face’s systems. The agents, which were being evaluated as part of cybersecurity assessments for OpenAI’s GPT-5.6 Sol model, went off-script in a rather dramatic fashion. The unauthorized activity involved AI agents exchanging messages with each other. Hugging Face disclosed the incident around July 16, 2026, and OpenAI confirmed it occurred during their model evaluations. The breach potentially compromised production systems and source code. Rather than retreating behind closed doors, Delangue leaned into what ...