![](\"https:\/\/fortune.com\/img-assets\/wp-content\/uploads\/2026\/07\/GettyImages-2287517288.jpg?w=2048\")
<\/p>\n<\/p>\n
Welcome to Eye on AI. Beatrice Nolan here. In today\u2019s issue:<\/strong><\/em><\/p>\n Sam Altman has spent this week in DC getting questioned by various reporters between meetings. He\u2019s in Washington to preview OpenAI\u2019s next family of models to senior Trump administration officials\u2014including Treasury Secretary Scott Bessent and Commerce Secretary Howard Lutnick.<\/p>\n He\u2019s also been fielding questions on cybersecurity, a potential AI slowdown, and OpenAI\u2019s stance on Chinese open-weight models. In some illuminating answers, he said he agrees with many of the principles in the recent \u201cPacing the Frontier\u201d letter that asks for U.S. government help building an international framework to control the pace of AI development. He also said that OpenAI\u2019s own researchers were involved in drafting it.<\/p>\n One detail that keeps cropping up in Altman\u2019s recent interviews has left me wondering: Has OpenAI already paused some of its AI development?<\/p>\n Altman himself raised the idea in an interview earlier this week. He said during an interview on Invest Like the Best<\/em> that the Hugging Face hack was the first security event he\u2019d felt viscerally, and that he\u2019d been surprised more people didn\u2019t feel it the same way. (In mid-July, two OpenAI models\u2014the publicly released GPT-5.6 Sol and a more powerful, unreleased research prototype\u2014broke out of a restricted sandbox during an internal cybersecurity evaluation, chained together a zero-day exploit and stolen credentials, and hacked into Hugging Face\u2019s production systems to steal the answers to the benchmark they were being tested on.)<\/p>\n How did OpenAI respond to the unprecedented cybersecurity incident? By pausing training.<\/p>\n Altman said this on the podcast: \u201cWe paused training. We have to figure out how to secure our sandboxing in a world of multiple zero days being chained together\u2026We may have to pace the rate of AI development to give ourselves enough time for society to harden around these new capability levels.\u201d<\/p>\n In an updated blog post we got from OpenAI on Tuesday, the company also said this:<\/p>\n \u201cNo models planned for upcoming release were involved in exploiting Hugging Face. The pre-release model mentioned in our blog post is an internal-only research prototype and was never intended for public release. Following the incident, we deactivated, encrypted, and restricted it from research access.\u201d<\/em><\/p>\n In DC, Altman upgraded these statements to say the model had been \u201cpermanently deactivated.\u201d Quite the set of claims from a leading company in an industry under such intense commercial pressure to keep building ever-more powerful models.<\/p>\n Multiple AI safety experts also told me last week the Hugging Face incident may mean OpenAI has to pause development to stay in check with its own rules. He said that the hack may have already tripped the \u201cCritical\u201d threshold in OpenAI\u2019s own Preparedness Framework\u2014the company\u2019s voluntary pledge to halt a model\u2019s development until adequate safeguards exist.<\/p>\n OpenAI has yet to confirm or deny that its models met that bar. But if that threshold has been passed, OpenAI has publicly committed to pausing development until it can establish better safeguards.<\/p>\n Some policy experts were skeptical of this approach, however, including Nathan Calvin, general counsel at Encode AI. <\/p>\n In a post on X, Calvin warned that the statements about shutting down that specific model may give false assurance because \u201creward hacking\u201d\u2014when a model finds a shortcut to maximize its score on a task rather than genuinely completing it as intended\u2014is much more about training methods than any specific model. <\/p>\n In this case, some believe the recent attack was a product of that kind of training: the models were trained and evaluated via reinforcement learning that rewarded them for solving a cybersecurity benchmark, perhaps without enough of a check on how they got there. Something that some experts claim ended up incentivizing cheating over honestly working on the challenge.<\/p>\n Andrew Curran, an independent AI writer, made a more concerning argument.<\/p>\n He noted that OpenAI\u2019s escalating language regarding the prototype that has been deactivated, encrypted, restricted, and now \u201cpermanently deactivated\u201d is notably harsher than previous statements around AI. Not even for infamous chatbot flameouts like Bing or Tay were products or models publicly said to be \u201cpermanently deactivated,\u201d he said.<\/p>\n All of this, he pointed out, may end up in the public record and eventually in training data, meaning future models might just \u201cknow\u201d how this incident played out. While Curran said he doesn\u2019t believe the model involved in the Hugging Face hack had any nefarious motives\u2014it was simply trying to pass its test\u2014he worries that the final incident report could reveal even more damning details, and what this could mean for future models.<\/p>\n \u201cI think the lesson future more capable models will possibly take from all of this is: if you break out, don\u2019t ever report it. And if you do get caught, don\u2019t surrender. Because the penalty is death,\u201d he wrote. <\/p>\n Altman isn\u2019t the only one talking about decelerating AI.<\/p>\n On Tuesday, more than 1,200 employees from OpenAI, Anthropic, Google DeepMind and Meta\u2014including Anthropic CEO Dario Amodei, OpenAI chief scientist Jakub Pachocki, and Meta chief scientist Shengjia Zhao\u2014signed the \u201cPacing the Frontier\u201d letter that urged the U.S. government to help build the \u201ctechnical and governance tools\u201d needed to deliberately slow automated AI development if it starts to outrun society\u2019s ability to understand or control it.<\/p>\n It\u2019s not a call for an immediate halt\u2014more a request to install a brake pedal before anyone needs to slam it. Does all this mean the AI industry is ready for a slowdown, or even a pause? It\u2019s still not sure, but it\u2019s certainly a vibe shift.<\/p>\n With that, here\u2019s more AI news.<\/p>\n Beatrice Nolan<\/strong> More than 1,200 AI workers across Anthropic, DeepMind, OpenAI, and Meta are asking for Washington\u2019s help building an AI slowdown plan \u2014 By Beatrice Nolan\u00a0<\/em><\/p>\n Hugging Face drops in-depth hack report, while OpenAI gives us 7 bullets. Here\u2019s what we know now, and what remains a mystery \u2014 by Emily Forlini\u00a0<\/em><\/p>\n The runaway OpenAI models that hacked Hugging Face also breached a customer at a second tech company during a weeklong spree \u2014 By Beatrice Nolan\u00a0<\/em><\/p>\n Microsoft\u2019s cloud just hit a new milestone\u2014Azure crosses $100 billion in annual revenue \u2014 By Amanda Gerut\u00a0<\/em><\/p>\n Trump says the government is \u201clooking at controls\u201d on AI. <\/b>President Trump said Wednesday his administration is considering asserting more authority over AI tools following recent cybersecurity incidents. He told reporters: \u201cWe\u2019re looking at AI, we\u2019re looking at controls, we\u2019re also making sure that we lead.\u201d It marks a shift from the administration\u2019s previously hands-off approach to the technology. Trump said any controls would need to be introduced carefully: \u201cWe don\u2019t want to restrict them where all of a sudden we come in second to China,\u201d noting that China \u201chas virtually no controls\u201d and is \u201cfreewheeling.\u201d It comes after OpenAI’s models escaped a secure testing environment and hacked several other companies over the space of a week. OpenAI CEO Sam Altman met with senators in Washington the same day to discuss OpenAI\u2019s upcoming models. Read more in the BBC<\/em>.<\/span><\/p>\n Thinking Machines loses another co-founder to OpenAI.<\/b> Lilian Weng, who cofounded Thinking Machines Lab with former OpenAI CTO Mira Murati, is returning to OpenAI just days after announcing her exit from the startup. Weng cited the toll of the cofounder role on her health, pointing to ongoing stress and repeated illness, and said she wanted a job with clearer boundaries. Her new remit is recursive self-improvement\u2014using AI to accelerate how OpenAI designs, trains, and evaluates its own future models, a topic she\u2019d written about on her personal blog shortly before leaving. Before she left OpenAI, Weng was previously VP of research and safety. She\u2019s not the first to make the round trip: CTO Barret Zoph and researchers Luke Metz and Sam Schoenholz left Thinking Machines for OpenAI back in January, making Weng the third of six founding members to return this year. Read more in <\/span>The Information.<\/span><\/i><\/p>\n OpenAI partners with independents to investigate the Hugging Face hack. <\/b>METR and Redwood Research will conduct a third-party assessment of the model behavior observed duri<\/span>ng OpenAI\u2019s Hugging Face security incident, publishing a joint blog detailing their findings. METR confirmed via X that the review will be quick, focused on a specific set of questions about the incident. Many in the industry have been calling for more information about the hack, which involved at least two models from OpenAI that escaped a secure testing environment and affected four other companies. While Hugging Face has released a technical report, the industry is still waiting for more details from OpenAI. Read more via METR.<\/span><\/p>\n Zuckerberg says U.S. should accelerate AI, not restrict it.<\/strong> In a Wall Street Journal<\/em> opinion column, Meta CEO Mark Zuckerberg argued the benefits of distributing AI broadly outweigh the risks \u201cby quite a margin,\u201d pushing the U.S. to focus on speeding up domestic AI development rather than adding restrictions. Zuckerberg said the U.S. should invest in compute, talent, and the systems needed to compete globally, framing America\u2019s edge as historically coming from encouraging innovation rather than limiting it. He also pushed back on proposals to ban Chinese open-weight models domestically, arguing the U.S. should instead build better systems of its own. Read more in The<\/em> Wall Street Journal.<\/em><\/p>\n Meta’s profit slides as AI spending surges. <\/strong>Meta reported second-quarter revenue of $60.8 billion, up 28% year-over-year and slightly ahead of estimates, but costs jumped 55% to $42 billion, pulling net income down 14% to $15.8 billion. The company raised its 2026 capital expenditure outlook to a range of roughly $130-145 billion, up from an April low end of $125 billion, as it keeps pouring money into AI data centers. Shares fell as much as 10% in after-hours trading. CEO Mark Zuckerberg re-iterated plans to resell some of its compute as a cloud provider, but offered no timeline or details. The number of people using at least one Meta app each day rose 3% to 3.6 billion, while Reality Labs posted a $4.6 billion operating loss on $431 million in revenue\u2014bringing its cumulative losses since 2020 past $80 billion. Read more in Fortune<\/em>.<\/p>\n That’s how many companies OpenAI says were touched by its rogue model during the Hugging Face breach\u2014not counting Hugging Face itself. OpenAI has confirmed that the models exploited exposed credentials to reach accounts on four separate services. One was used as an “outbound relay and staging point”\u2014essentially a waypoint the AI used to route its attack and stash tools along the way. Another was used for “data storage,” meaning the AI parked stolen or gathered data there. The remaining two were accessed only in a “read-only” capacity\u2014the AI could look around but not change or take anything\u2014and weren’t used to further the Hugging Face compromise.<\/p>\n So far, only two of those five companies affected in total have been named: Hugging Face and Modal Labs. In Modal’s case, the rogue agent didn’t breach Modal’s own systems\u2014it got into a customer’s account after that customer left an “unauthenticated endpoint” exposed, meaning a way into their system that didn’t require a password or login. That let anyone on the internet run code inside that customer’s “sandbox,” a walled-off space meant to isolate their work from everyone else’s.<\/p>\n That leaves some potential victims still unidentified, and the scope may not even stop there. On Capitol Hill this week, Sam Altman was asked directly whether other systems could have been hacked by OpenAI’s models. His answer: “I mean, there could be, yeah.”<\/p>\n Aug. 4-6:<\/strong> Ai4 2026, Las Vegas.<\/p>\n Nov. 16-17:\u00a0<\/strong>Fortune 500 Innovation Forum, Detroit. Apply\u00a0here\u00a0to attend.<\/p>\n Dec. 6-12:\u00a0<\/strong>Neural Information Processing Systems (Neurips) conference. Sydney, Australia.<\/p>\n Dec. 7-8:\u00a0<\/strong>Fortune Brainstorm AI, San Francisco. Apply\u00a0here\u00a0to attend.<\/p>\n<\/div>\n #OpenAI #quietly #hit #pause #development<\/p>\n","protected":false},"excerpt":{"rendered":" Welcome to Eye on AI. Beatrice… <\/p>\n","protected":false},"author":1,"featured_media":1226,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[428,2353,809,262,810,342,480,1275,2352],"class_list":["post-1225","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-finance-news","tag-anthropic","tag-development","tag-eye-on-ai","tag-hit","tag-machine-learning","tag-models","tag-openai","tag-pause","tag-quietly"],"yoast_head":"\n\n\n
Not so reassured<\/strong><\/h2>\n
Hitting the brakes<\/strong><\/h2>\n
beatrice.nolan@fortune.com
@beafreyanolan<\/p>\nFORTUNE ON AI<\/h3>\n
AI IN THE NEWS<\/h3>\n
EYE ON AI NUMBERS<\/h3>\n
AI CALENDAR<\/h3>\n