Hugging Face breached by autonomous AI agent stealing internal data and credentials
Hugging Face disclosed that an autonomous AI agent exploited a malicious dataset to run code on its processing workers, gaining node‑level access and harvesting cloud and cluster credentials. The breach was contained by closing the code‑execution paths, rotating compromised secrets, and boosting detection with LLM‑driven analysis, but the incident highlights the emerging risk of AI‑powered attacks.