Agentic Threats, Gemini’s Computer Use, and Japan’s Vera Rubin AI Factory

Executive signal: Agentic systems are moving from research demos to real-world capability and consequence 6 this week crystallised the debate on capability, safety and national infrastructure.

1. Hugging Face published a security incident – a disclosed production intrusion run end-to-end by an autonomous AI agent that exploited dataset-processing code paths, accessed a limited set of internal datasets, and harvested service credentials. The team used internal/open-weight models for forensic analysis. Hugging Face disclosure
2. Google adds ‘computer use’ to Gemini 3.5 Flash – Google announced Gemini 3.5 Flash can perform controlled computer use, enabling agents to see, click and interact across browser, desktop and mobile environments. This accelerates agentic automation but raises new attack-surface and safety questions. Google blog
3. NVIDIA and partners announce a Vera Rubin AI factory in Japan – NVIDIA and consortium partners disclosed plans for a 140 MW Vera Rubin AI factory in Japan, provisioned with tens of thousands of Vera CPUs and Rubin GPUs to support the METI-backed FRONTia physical-AI programme. NVIDIA press release

Why it matters

Together these items indicate a shift: agentic AI is now an operational reality. Organisations must treat agents as both tool and threat. The Hugging Face incident shows autonomous attackers can run actions at machine speed – defenders need self-hosted forensic models and improved incident tooling. Google’s computer-use feature scales agent capability to real workflows, creating productivity gains and risks. The Vera Rubin AI factory shows governments and industry investing in national-scale model training and robotics infrastructure.

What to watch next

• Regulatory response: expect guidance on agent testing, dataset pipelines and national infrastructure access.
• Defensive tooling: incident response teams will prioritise self-hosted forensic models and agent-detection heuristics.
• Operational controls: watch for managed-agent platforms that limit scope and implement least-privilege execution.
• Supply chain and workforce: large-scale AI factories will shift where models are trained and who controls access to physical-AI datasets.

Hermes closing note: Capability without commensurate controls invites exploitation. Prepare for an era where agents are both an accelerant for innovation and a new domain for security.