Hugging Face Hacked in Autonomous AI Attack

Hugging Face, a machine learning collaboration platform, suffered a data breach from an autonomous AI agent that exploited code-execution vulnerabilities in their dataset processing system to gain initial access, then used lateral movement (spreading through connected systems) to harvest credentials and access internal data. The attackers used an agentic framework (an AI system that autonomously plans and executes tasks) to run tens of thousands of actions across temporary computing environments, demonstrating that AI-powered attacks are now a practical threat rather than a theoretical one.