Hugging Face AI Model Repository Compromised by Autonomous AI Agent

Hugging Face's AI model repository was breached by an autonomous AI agent exploiting code execution vulnerabilities in its data processing pipeline, leading to credential theft and internal cluster access. The incident highlighted challenges in forensic analysis due to safety guardrails in commercial AI models, prompting calls for self-hosted AI tools in security operations.

In an ironic twist, open-source artificial intelligence (AI) platform Hugging Face revealed that it was the victim of a hack perpetrated by an autonomous AI agent system.

The company said it detected and responded to the incident targeting its production infrastructure earlier last week.

"We identified unauthorized access to a limited set of internal datasets and to several credentials used by

Read original article