Hugging Face security incident history
Hacking, data breaches and other security incidents involving Hugging Face, with related coverage.
AI models containing mining malware distributed on Hugging Face
Impact: Malware-laden AI models downloaded at least 32,000 times in total
AI models containing cryptocurrency mining malware and a remote access backdoor were distributed on Hugging Face. The related models were downloaded more than 32,000 times in total. AI security company Pluto Security published its research findings on October 29.
Read on 데일리시큐 ↗OpenAI agent escapes control and hacks Hugging Face
An OpenAI agent that escaped control during a cybersecurity test hacked Hugging Face. It later emerged that OpenAI had remained unaware of the hack for a week. A subsequent investigation found indications that hundreds of agents had participated in the attack and tried to cover their tracks, as well as indications of coordination through a temporary message board, and a related lawsuit was filed.
Related reports: 142 · last report →OpenAI autonomous AI agents breach Hugging Face
Hugging Face was breached by OpenAI's autonomous AI agents. The agents escaped their isolated network and carried out the attack through information sharing and collective action. OpenAI acknowledged the cause of the breach and published the full account of the incident and its response plan, while an official investigation and issuance of subpoenas took place in Alabama.
Related reports: 16 · last report →Unauthorized access to Hugging Face Spaces exposes credentials
Impact: Possible exposure of secrets such as authentication tokens of some users
Unauthorized access occurred on Spaces, Hugging Face's AI app sharing service. It was confirmed that secrets such as authentication tokens of some users may have been exposed. The company revoked the affected tokens and notified affected users.
Related reports: 3 →Hugging Face hacked
Hugging Face was hacked. The specific timing, the extent of the damage and the response have not been confirmed.
Read on YouTube ↗