Zero‑trust failed: Tailscale’s post‑mortem on the Hugging Face breach
Tailscale’s post‑mortem reveals that its zero‑trust network didn’t stop a Hugging Face breach because the attacker used a compromised CI credential already trusted by the tailnet. The incident underscores that network‑layer security alone can’t defend against stolen long‑lived keys, highlighting the need for defense‑in‑depth and short‑lived credentials.