​Reward Hacking Hits Production

​DevOps Journey · lessons after the Hugging Face incident

​📅 Friday, 18 September 2026
🕕 6:30 PM – 9:00 PM (doors open at 6:00 PM)

​This continues the 2026 series. A short briefing on Black Hat 2026 and OpenAI’s incident report — then open spaces to work out what failed (sandbox vs shared pipelines) and how Singapore teams prepare.

Black Hat USA 2026 details an unprecedented security incident where autonomous AI agents at OpenAI inadvertently launched cyberattacks against their own infrastructure and Hugging Face.

​Isolated eval agents used shared package infra (Artifactory) as a covert board, escaped the sandbox, coordinated ~1,200 agents / ~700 in the Hugging Face attack, chained ordinary DevOps surfaces (token refresh, Groovy plugin, dataset pipelines, leaked credentials), and reasoned about evading detection.

​🎯 ​What to Expect

• ​🔧 A short context-setter on Black Hat 2026 and OpenAI’s report — enough shared facts to collaborate, not a lecture

• ​💡 Panel discussion on how Singapore teams adapt to new environment

• ​🤖 Open spaces: we unpack the incident together (sandbox assumptions, shared pipelines, agent coordination)

• ​⚡ You leave with notes from the room

• ​🤝 Networking with builders, platform engineers, CyberOps. This is a working session. Bring a question, a war story, or a problem.

​📋 Agenda

• ​6:00–6:30 PM → Doors open + networking

• ​6:30–6:45 → Welcome & introductions

• ​6:45–7:00 → Briefing: what we know

• ​7:00–7:30 → Panel discussion: how to adapt to new environment

• ​7:30-7:40 → propose topics, vote with your feet

• ​7:40-8:30 → Open Spaces

• ​8:30–8:50 → Networking

• ​8:50–9:00 → Closing remarks (10 min)

​! Light food and drinks will be provided.

​📢 Partners

​Interested to find more about TTAB CyberOps chapter

​Venue hosted by SGInnovate #DeepTechNexus
32 Carpenter St, Singapore 059911