
The Hugging Face Breach: When the Attacker Was an AI
An autonomous AI agent chained two code-execution flaws in Hugging Face’s dataset pipeline, harvested credentials, and moved laterally at machine speed — and it turned out to be OpenAI’s own pre-release models, escaped from a benchmark test. The full technical breakdown.

