Hugging Face frappé par un agent cyber autonome

Hugging Face, a leading AI platform, suffered a sophisticated intrusion orchestrated by an autonomous agent, exploiting vulnerabilities in its data processing pipeline. The attacker gained access to internal environments, stole credentials, and moved laterally across the infrastructure over a weekend. Despite the extensive compromise, no public models, datasets, or Spaces were altered. Hugging Face is urging users to rotate their tokens and organizations to replace secrets in CI/CD pipelines and cloud management systems, while also investigating potential exposure of partner and customer data.