Hugging Face Breach Used Autonomous AI Agent

Hugging Face disclosed that attackers breached its production infrastructure using an autonomous AI agent, stealing internal datasets and credentials. The intrusion exploited two code-execution vulnerabilities via a malicious dataset. Hugging Face has closed the vulnerabilities, revoked credentials, reported the incident to law enforcement, and is working with external forensic experts.