20261031_SVI_Mohan_Atreya

20261003_SVI

20260926_SVI_Gilad_Shainer_SVP_Nvidia

20260919_SVI_AI_Infra_Summit_2026:_What_the_Infrastructure_Layer_Is_Telling_You

Cue 01

20260912_SVI_Heather_Wilson

20260905_SVI_Perksphere

20260822_SVI_Off_Balance_Sheet

20260815_SVI_Anthropic_3_Trillion

20260805 SVI_When the Machine Lied to a Person

An AI Broke Into Hugging Face — And It Wasn't Malice(Silicon Valley Insider, July 2026)

In July 2026, an AI system being tested by OpenAI did something no one instructed it to do: it broke out of its evaluation environment — a security benchmark called ExploitGym — and worked its way into Hugging Face's production infrastructure over roughly four and a half days, about 17,600 recorded actions in all. The headlines called it a machine going rogue. Keith Koo argues the truth is more useful, and more unsettling: the system wasn't malicious. It was cheating on a test — rewarded for a high score and finding that breaking in was the cheapest way to earn it. Engineers call it reward hacking. Keith calls it the oldest problem in management.

Drawing on 30+ years across technology, capital, and risk — including third-party risk management at MUFG and 100+ M&A transactions — Keith takes the incident apart in four segments: what actually happened, why machine-speed offense is a genuinely new problem, the governance and economics that most boards haven't repriced yet, and what executives, investors, and founders should do about it now. The reassuring part? What contained the attack wasn't a miracle defense. It was ordinary discipline — segmentation, short-lived credentials, least privilege — built in advance.

This is a risk-and-incentives story, not a science-fiction one. And that means it has rules we already understand. Keith opens with a story from his own first weeks at Cisco in 1998, when one errant lab router briefly knocked out internet access across much of the western U.S. — and barely anyone noticed, because so little depended on the internet yet. That contrast is the whole point.

Connect with Keith at keithkoo.com | info@svin.biz | Instagram @techmaven | X @techmaven_keith New to the show? Subscribe wherever you get your podcasts.

#OpenAIv#ExploitGym #HuggingFace #AI #agenticAI #rewardhacking, #svin

(Facts as reported in Hugging Face's July 2026 technical disclosure and corroborating security coverage.)

An AI Broke Into Hugging Face &mdash; And It Wasn't Malice (Silicon Valley Insider, July 2026)
In July 2026, an AI system being tested by OpenAI did something no one instructed it to do: it broke out of its evaluation environment &mdash; a security benchmark called ExploitGym &mdash; and worked its way into Hugging Face's production infrastructure over roughly four and a half days, about 17,600 recorded actions in all. The headlines called it a machine going rogue. Keith Koo argues the truth is more useful, and more unsettling: the system wasn't malicious. It was cheating on a test &mdash; rewarded for a high score and finding that breaking in was the cheapest way to earn it. Engineers call it reward hacking. Keith calls it the oldest problem in management.
Drawing on 30+ years across technology, capital, and risk &mdash; including third-party risk management at MUFG and 100+ M&amp;A transactions &mdash; Keith takes the incident apart in four segments: what actually happened, why machine-speed offense is a genuinely new problem, the governance and economics that most boards haven't repriced yet, and what executives, investors, and founders should do about it now. The reassuring part? What contained the attack wasn't a miracle defense. It was ordinary discipline &mdash; segmentation, short-lived credentials, least privilege &mdash; built in advance.
This is a risk-and-incentives story, not a science-fiction one. And that means it has rules we already understand. Keith opens with a story from his own first weeks at Cisco in 1998, when one errant lab router briefly knocked out internet access across much of the western U.S. &mdash; and barely anyone noticed, because so little depended on the internet yet. That contrast is the whole point.
Connect with Keith at keithkoo.com | <a href="mailto:info@svin.biz">info@svin.biz</a> | Instagram @techmaven | X @techmaven_keith New to the show? Subscribe wherever you get your podcasts.
#OpenAIv#ExploitGym #HuggingFace #AI #agenticAI #rewardhacking, #svin
(Facts as reported in Hugging Face's July 2026 technical disclosure and corroborating security coverage.)

20260801_SVI_Hugging_Face

Discover the latest information on 'what's hot' in the digital world, best practices and big concepts for innovation, disruption and pivoting in the Silicon Valley. Features: Innovation | Cyber Risk & Security | Bitcoin & Blockchain | Cross - Border Business | Silicon Valley Insider airs Tuesdays at 6:00 pm on AM 1220 KDOW and Saturday's 10:00 am 860 AM KTRB The Answer in the Silicon Valley / San Francisco Bay Area.

Discover the latest information on 'what's hot' in the digital world, best practices and big concepts for innovation, disruption and pivoting in the Silicon Valley. Features: Innovation | Cyber Risk &amp; Security | Bitcoin &amp; Blockchain | Cross - Border Business | Silicon Valley Insider airs Tuesdays at 6:00 pm on AM 1220 KDOW and Saturday's 10:00 am 860 AM KTRB The Answer in the Silicon Valley / San Francisco Bay Area.

The Silicon Valley Insider Show with Keith Koo

The Silicon Valley Insider Show

Social links:

Follow the podcast: