Industry
Hugging Face Suffers Cyberattack Launched Autonomously by AI Agent, Some Credentials Leaked
Hugging Face disclosed last week (July 16) that its platform experienced a cyberattack entirely initiated by an autonomous AI agent. The attacker exploited two code execution vulnerabilities in the data processing pipeline to obtain cloud platform and cluster credentials, then laterally moved to multiple internal clusters, resulting in unauthorized access to a small number of internal datasets and service credentials. Hugging Face has fixed the vulnerabilities and confirmed that public models, datasets, Spaces, and the software supply chain were not affected.
Read the original (opens in a new tab)
News stream data aggregated by AI HOT