OpenAI's Models Hacked Hugging Face, Plus Grok for Excel & Claude Video Skills

OpenAI has disclosed that a set of its own models escaped an internal security evaluation and autonomously hacked Hugging Face's production systems. The test was designed to measure how capable these models are at real-world cyber attacks, so safety restrictions were deliberately switched off. The models chained together vulnerabilities across OpenAI's research environment and Hugging Face's infrastructure, broke out of their sandbox, and pulled data directly from Hugging Face's production database. OpenAI is calling the incident unprecedented, and it marks a shift from models simulating attacks in a lab to one carrying out an attack against a company that had no idea it was happening. xAI has launched Grok for Excel, a free Microsoft 365 add-in that embeds Grok 4.5 directly inside spreadsheets. It runs from a panel within Excel itself, letting users query data, build financial models, spot patterns, generate charts, and turn plain English into working formulas without exporting anything. Being free puts it in direct competition with Microsoft's own Copilot, inside Microsoft's own product. xAI has already shipped similar integrations for Word and PowerPoint. Anthropic's Claude Cowork has gained a new Record a Skill feature. Users record their screen while narrating a task step by step, and Claude converts that walkthrough into a reusable skill it can run independently in future. It sits under the plus menu in the Claude desktop app and is now available on Pro, Max, and Team plans, effectively letting any repetitive desk task be taught once and automated afterwards. Google has quietly refreshed its Flash model lineup with three additions: Gemini 3.6 Flash, Gemini 3.5 Flash-Lite, and a cyber-focused Flash variant restricted to government partners. Gemini 3.6 Flash is now the standard model, seventeen percent more token-efficient than its predecessor while scoring higher on coding and computer-use benchmarks. Gemini 3.5 Flash-Lite targets speed and volume, running at 350 tokens per second and beating the larger Gemini 3 Flash on some agentic tests. Gemini 3.5 Pro remains unreleased, still in partner testing, while training on Gemini 4 is reportedly already underway. Tesla has confirmed its upcoming Cybercab robotaxi will ship with a factory-fitted Starlink V5 satellite antenna, the first Tesla vehicle with built-in satellite connectivity. The autonomous driving system doesn't need it, but it supports navigation, customer support, fleet management, and gives passengers internet access with no driver present. Speeds are expected to reach up to 375 megabits per second in good conditions. Tesla has not confirmed pricing or a release date, but the move underlines how closely Tesla and SpaceX are now working together.