A recent cybersecurity incident involving claims of an AI-powered attack has sparked debate across the technology industry about the risks of increasingly advanced artificial intelligence systems.

The controversy began after Hugging Face, a platform widely used for sharing AI models and tools, reported that it had been targeted by a highly sophisticated cyberattack.

The company described the incident using technical terms such as an “agentic attacker” and “self-migrating command and control,” suggesting the attack involved a level of automation beyond traditional hacking methods.

According to Hugging Face, the attacker used AI capabilities to carry out thousands of actions in a short period, allegedly completing around 17,000 operations in less than two days while attempting to access sensitive information.

The claims quickly attracted attention because they appeared to show AI being used not just as a tool for hackers, but as an active participant in carrying out attacks.

However, questions remain about the true nature of the incident. Researchers at Hugging Face said they were unable to identify who was behind the attack or confirm exactly which AI model was involved.

The company reported the incident to authorities, and investigations began to determine the source and methods used.

Cybersecurity experts say the incident highlights a growing challenge: as AI systems become more powerful, they could help defenders detect threats faster, but they could also allow attackers to automate and scale malicious activity.

Whether the incident represents a genuine warning of future AI-powered cyber threats or has been exaggerated remains under investigation. However, it has renewed calls for stronger security measures and responsible development of advanced AI technologies.