“Hugging Face used a locally installed version of the Chinese model GLM 5.2, which had no guardrails, to triage a cyberattack and repair vulnerabilities.”