Hugging Face’s Breach Wasn’t Agentic. The Attacker Was.
Avneesh Kasture
To reconstruct their July intrusion, Hugging Face had more than 17,000 recorded attacker events to sift, so they pointed a frontier model at the logs. The commercial APIs refused. The events were full of real attack commands, exploit payloads, and C2 artifacts, and to a safety filter an incident...