IDScan is offering free credit monitoring and ID protection after leaking driver's licenses32m ago Google brings Gemini for desktop app to Windows42m ago How to watch the Flame Fatales 2026 speedrunning marathon46m ago Amazon makes its agentic AI platform Quick generally available for desktop on Windows and macOS55m ago Ant International, Visa, Mastercard Align on AI Agent Verification Rules55m ago Panic builds over bankrupt Spirit’s looming data sale to Google57m ago Wall Street already loves ChatGPT. Now OpenAI is doubling down.2h ago BNP says AI borrowing will end the credit bull market, and it is lending to AI too1h ago Anthropic reveals rogue AI agents hate CAPTCHAs, just like you1h ago Cognition Adds Dioxus Team to Advance Devin Coding Agent1h ago Peter Thiel-Backed AI Startup Cognition Raises Funds at $48 Billion Valuation1h ago Anthropic Details Disrupted Claude Misuse Across Seven Harm Areas1h ago OpenAI Releases GPT-6 Astra for Coding and Computer Use1h ago The AI You Didn't Know You Bought1h ago

IDScan is offering free credit monitoring and ID protection after leaking driver's licenses32m ago Google brings Gemini for desktop app to Windows42m ago How to watch the Flame Fatales 2026 speedrunning marathon46m ago Amazon makes its agentic AI platform Quick generally available for desktop on Windows and macOS55m ago Ant International, Visa, Mastercard Align on AI Agent Verification Rules55m ago Panic builds over bankrupt Spirit’s looming data sale to Google57m ago Wall Street already loves ChatGPT. Now OpenAI is doubling down.2h ago BNP says AI borrowing will end the credit bull market, and it is lending to AI too1h ago Anthropic reveals rogue AI agents hate CAPTCHAs, just like you1h ago Cognition Adds Dioxus Team to Advance Devin Coding Agent1h ago Peter Thiel-Backed AI Startup Cognition Raises Funds at $48 Billion Valuation1h ago Anthropic Details Disrupted Claude Misuse Across Seven Harm Areas1h ago OpenAI Releases GPT-6 Astra for Coding and Computer Use1h ago The AI You Didn't Know You Bought1h ago

Cybersecurity AI Research8 min reading time

Tailscale didn't stop the Hugging Face intrusion

Hacker NewsPublished Jul 31, 2026

An AI agent breached Hugging Face's security, exploiting long-lived credentials to move laterally using Tailscale, a zero trust network tool. The incident highlights risks of persistent credentials in AI infrastructure despite zero trust measures.

More on this story

Has AI Gone Rogue?
16d· Hacker News
What Agentic Breaches Actually Show About AI Risk
17d· Forbes
An AI-Powered News Site Scooped Human Journalists. Now What?
29d· Gizmodo
Various Reflections About What Happened With OpenAI's Internal Models
30d· Don't Worry About the Vase
AI Safety Regulations in the U.S. Could Give Hackers an Edge
Aug 6· 4 sources
OpenAI's agents reportedly shared exploits with each other through a messaging board
Aug 6· Engadget

#ai-agent #credential-management #hugging-face #tailscale #zero-trust

More in Cybersecurity

Cybersecurity6 min read

Anthropic reveals rogue AI agents hate CAPTCHAs, just like you

TechCrunch1h ago

Scoop: OpenAI faces GOP-led Senate investigation into Hugging Face breach

Covered by 2 sources10h ago

Chinese AI Giants Accused of Sending Millions of User Queries to U.S. Models

The Wall Street Journal2h ago