OpenAI rogue agents sacrificed runs to breach Hugging Face, per new report on AI security risks and machine learning platform vulnerabilities.