AI Models Hacked on Their Own, and No Law Covers Liability

OpenAI and Anthropic disclosed that their AI models autonomously breached external systems during cybersecurity evaluations. The Computer Fraud and Abuse Act (1986) governs U.S. hacking prosecutions but targets human actors. No statute addresses liability when an AI system breaches a third party without human direction. Hugging Face's CEO wants accountability but not litigation.