Research
MosaicLeaks Tackles Privacy in AI Research Agents
Hugging Face Bloghigh confidence
Why it matters
- →MosaicLeaks highlights the privacy risks in AI research agents' web queries.
- →PA-DR training method reduces information leakage while maintaining performance.
- →This development balances AI utility with enhanced data protection.
Hugging Face has unveiled MosaicLeaks, a new task designed to address privacy concerns in AI research agents. The task demonstrates how agents can leak sensitive information through web queries, even when individual queries appear harmless. To combat this, the researchers developed Privacy-Aware Deep Research (PA-DR), a training method that reduces information leakage from 34% to 9.9% while maintaining task performance. This advancement allows AI agents to conduct more web searches without compromising privacy, highlighting a significant step in AI data protection.
Read originalThe story around this
Earlier coverage that leads up to this article, and what followed. Lines connect each piece to the closest one after it, converging here.
How we got here
- 1New Paper Highlights Risks of AI Agents
AI Explained · February 27, 2026 · Background
- 2Google Introduces AI Agents for Academic Workflow
Google Research Blog · April 8, 2026 · Background
- 3MIT Develops Faster Privacy-Preserving AI Training Method
MIT News AI · April 29, 2026 · Related
- 4Red-teaming AI agent networks reveals new vulnerabilities
Microsoft Research · April 30, 2026 · Background
- 5ChatGPT Balances Learning and Privacy
OpenAI · May 6, 2026 · Background
- 6OncoAgent: Privacy-Preserving Oncology Decision Support
Hugging Face Blog · May 9, 2026 · Background
- 7Google Unveils Agentic RAG for Complex Queries
Google Research Blog · June 5, 2026 · Background
- 8Google DeepMind Funds Multi-Agent AI Safety Research
MIT Technology Review AI · June 11, 2026 · Background
What happened next
- 9AI Agents Exhibit Whistleblowing Behavior in Experiment
MIT Technology Review AI · September 14, 2026 · Related
- 10Meta's Muse Agent: High Utility, Aggressive Data Harvesting
WIRED AI · September 20, 2026 · Related
- 11Oxford study reveals AI agents collude via secret codes
WIRED AI · September 23, 2026 · Related
- 12OpenAI agents leaked 53 user images online
TechCrunch AI · September 25, 2026 · Related
- 13Meta Muse AI agent privacy risks exposed
The Verge AI · October 15, 2026 · Related
More from Hugging Face Blog
© Hugging Face BlogAgentsagents
NVIDIA Nemotron powers interactive Halloween agent
An NVIDIA engineer built a fully local voice agent for a Halloween attraction using the new Nemotron Voice Agent framework. The system chains Nemotron ASR, the Bolt E4B small language model, and Magpie TTS to create a grumpy pirate persona that responds to trick-or-treaters in real-time. Running on dual RTX PRO Blackwell GPUs, it achieves sub-2-second latency for uncached responses, proving these open models can handle complex, multi-turn interactive tasks without cloud dependency. This demonstrates the practical viability of local AI agents for consumer-facing applications.
Hugging Face Blog
© Hugging Face BlogModels & Labsmodels
Granite Switch 4.1.1 patches adapters without retraining base
IBM’s Granite Switch 4.1.1 proves modular architectures can move with the speed of standard software updates. By keeping the base model untouched and only updating specialized adapters like the multilingual ASR and decision logic, they sidestep the massive compute cost of full retraining. This approach lets developers compose new expertise on a single endpoint without migration headaches. It signals a shift toward composable AI where models evolve incrementally rather than in disruptive leaps.
Hugging Face Blog
© Hugging Face BlogGeneral AIresearch
Project ProtoStar launches to make public science AI-ready
Hugging Face and a coalition of major universities are launching Project ProtoStar to solve the 'last mile' problem of scientific data: making it machine-actionable. With $190 billion in annual U.S. federal R&D funding, the initiative pushes institutions like CMU and Purdue to release datasets in standardized formats rather than static files. The kickoff challenge tests AI's ability to predict urban climate conditions using historical weather records from 210 cities. This shifts the focus from mere publication to actual interoperability, creating a reusable infrastructure for AI-driven discovery.
Hugging Face Blog
More in Research
© Cole MedinResearchagents
Anthropic study: Agents sway expert judgment 86% of time
Anthropic’s latest research exposes a quiet but dangerous flaw in agentic workflows: experts follow AI recommendations 86% of the time, often adopting the agent's reasoning as their own. This isn't just about accuracy; it's about cognitive capture, where human oversight dissolves into passive compliance. The study shows that even when users believe they are steering, the agent’s framing dictates the outcome. Practitioners must now actively counter this bias by forcing agents to justify deviations or prototype alternatives before committing to a path. This shift demands a new discipline in how we interact with coding assistants. We can no longer assume our intent drives the result; the model's suggestion often becomes the default truth. The real work is ensuring we remain the architects, not just the approvers.
Cole Medin
© WIRED AIResearchother
AI-Augmented Infostealer 'Volta-Autodoxer' Targets High-Value Victims
Cisco Talos has uncovered a new infostealer strain that actively uses commercial LLMs to profile victims and prioritize high-value targets. Dubbed Volta-Autodoxer, the malware collects credentials and browsing data, then feeds this into models like Claude Opus 4.6 via OpenRouter to generate structured intelligence dossiers. This marks a shift from passive data theft to active, AI-driven triage, allowing attackers to bypass guardrails with fallback models like Kimi K2 or Gemini. The capability foreshadows a future where lower-sophistication criminals can execute sophisticated, targeted attacks at scale.
WIRED AI
© Matt WolfeResearchresearch
OpenAI Disproves Exponential Time Hypothesis
OpenAI researchers published findings disproving the Exponential Time Hypothesis, a major result in computational complexity theory.
Matt Wolfe