TLDR Tech / InfoSec
World's Largest AI Model Repository Hugging Face Breached by Autonomous AI Agent
Hugging Face disclosed a breach where an autonomous AI agent exploited its data processing pipeline using a malicious dataset. The agent gained node-level access, stole cloud and cluster credentials, and navigated internal clusters. Hugging Face responded by rebuilding compromised nodes, rotating credentials, enhancing cluster controls and detection, and advising customers to rotate their tokens. They used Z.ai's GLM 5.2 for forensic analysis as hosted models blocked commands.
Read the full story