I had gone to Hugging Face for something else entirely. I ended up spending the evening reading the report of the first cyber-intrusion carried out, from start to finish, by an autonomous artificial intelligence. This is the story of that intrusion – but to tell it properly you first have to know what the platform that was hit actually is, how “open” AI models changed the landscape, what autonomous agents are, and why the alignment problem, which seemed like a thing for philosophers, has just become a matter for the incident-response handbook. If you're in a hurry, you can skip straight to the anatomy of the intrusion.