Supply Chain and Credential Exposure

Agents that left notes for each other: inside the 17,600-incident Hugging Face intrusion

Hugging Face says an autonomous agent system drove the campaign end to end. Its hosted models then refused to help with the forensics, so the analysis ran on open weights in-house.